In the Linux kernel, the following vulnerability has been resolved: net: fix udp gso skb_segment after pull from frag_list Commit a1e40ac5b5e9 ("net: gso: fix udp gso fraglist segmentation after pu…
High CVSS 7.5
Summary
In the Linux kernel, the following vulnerability has been resolved: net: fix udp gso skb_segment after pull from frag_list Commit a1e40ac5b5e9 ("net: gso: fix udp gso fraglist segmentation after pull from frag_list") detected invalid geometry in frag_list skbs and redirects them from skb_segment_list to more robust skb_segment. But some packets with modified geometry can also hit bugs in that code. We don't know how many such cases exist. Addressing each one by one also requires touching the …
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/0e65f38bd1aa14ea86e221b7bb814d38278d86c3 Patch
- https://git.kernel.org/stable/c/3382a1ed7f778db841063f5d7e317ac55f9e7f72 Patch
- https://git.kernel.org/stable/c/4399f59a9467a324ed46657555f0e1f209a14acb Patch
- https://git.kernel.org/stable/c/85eef1748c024da1a191aed56b30a3a65958c50c Patch
- https://git.kernel.org/stable/c/a04302867094bdc6efac1b598370fc47cf3f2388 Patch
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
Timeline
- nvd_ingest NVD