In the Linux kernel, the following vulnerability has been resolved: net: gso: fix ownership in __udp_gso_segment In __udp_gso_segment the skb destructor is removed before segmenting the skb but the…
高危 CVSS 7.8
摘要
In the Linux kernel, the following vulnerability has been resolved: net: gso: fix ownership in __udp_gso_segment In __udp_gso_segment the skb destructor is removed before segmenting the skb but the socket reference is kept as-is. This is an issue if the original skb is later orphaned as we can hit the following bug: kernel BUG at ./include/linux/skbuff.h:3312! (skb_orphan) RIP: 0010:ip_rcv_core+0x8b2/0xca0 Call Trace: ip_rcv+0xab/0x6e0 __netif_receive_skb_one_core+0x168/0x1b0 …
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判 · 自动通道
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
受影响产品
- :
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/01a83237644d6822bc7df2c5564fc81b0df84358 Patch
- https://git.kernel.org/stable/c/084819b0d8b1bd433b90142371eb9450d657f8ca Patch
- https://git.kernel.org/stable/c/455217ac9db0cf9349b3933664355e907bb1a569 Patch
- https://git.kernel.org/stable/c/9f28205ddb76e86cac418332e952241d85fed0dc Patch
- https://git.kernel.org/stable/c/a2d1cca955ed34873e524cc2e6e885450d262f05 Patch
- https://git.kernel.org/stable/c/c32da44cc9298eaa6109e3fc2c2b4e07cc4bf11b Patch
- https://git.kernel.org/stable/c/e8db70537878e1bb3fd83e5abcc6feefc0587828 Patch
- https://git.kernel.org/stable/c/ee01b2f2d7d0010787c2343463965bbc283a497f Patch
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html
- https://cert-portal.siemens.com/productcert/html/ssa-019113.html
时间线
- nvd_ingest NVD