NetSight
IP …
medium5.5

CVE-2024-42281

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a segment issue when downgrading gso_size Linearize the skb when downgrading gso_s…

Impact

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a segment issue when downgrading gso_size Linearize the skb when downgrading gso_size because it may trigger a BUG_ON() later when the skb is segmented as described in [1,2].

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.13 before 5.4.282
from 5.5 before 5.10.224
from 5.11 before 5.15.165
from 5.16 before 6.1.103
from 6.2 before 6.6.44
from 6.7 before 6.10.3

References