Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a segment issue when downgrading gso_size Linearize the skb when downgrading gso_size because it may trigger a BUG_ON() later when the skb is segmented as described in [1,2].
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
2be7e212d5419a400d051c84ca9fdd083e5aacac to < a689f5eb13a90f892a088865478b3cd39f53d5dcaffected2be7e212d5419a400d051c84ca9fdd083e5aacac to < dda518dea60d556a2d171c0122ca7d9fdb7d473aaffected2be7e212d5419a400d051c84ca9fdd083e5aacac to < f6bb8c90cab97a3e03f8d30e3069efe6a742e0beaffected2be7e212d5419a400d051c84ca9fdd083e5aacac to < 11ec79f5c7f74261874744039bc1551023edd6b2affected2be7e212d5419a400d051c84ca9fdd083e5aacac to < c3496314c53e7e82ddb544c825defc3e8c0e45cfaffected2be7e212d5419a400d051c84ca9fdd083e5aacac to < ec4eea14d75f7b0491194dd413f540dd19b8c733affected2be7e212d5419a400d051c84ca9fdd083e5aacac to < fa5ef655615a01533035c6139248c5b33aa27028affected
Linux Linux
Default version status: affected
4.13affected0 to < 4.13unaffected5.4.282 to ≤ 5.4.*unaffected5.10.224 to ≤ 5.10.*unaffected5.15.165 to ≤ 5.15.*unaffected6.1.103 to ≤ 6.1.*unaffected6.6.44 to ≤ 6.6.*unaffected6.10.3 to ≤ 6.10.*unaffected6.11 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/a689f5eb13a90f892a088865478b3cd39f53d5dc ↗
- https://git.kernel.org/stable/c/dda518dea60d556a2d171c0122ca7d9fdb7d473a ↗
- https://git.kernel.org/stable/c/f6bb8c90cab97a3e03f8d30e3069efe6a742e0be ↗
- https://git.kernel.org/stable/c/11ec79f5c7f74261874744039bc1551023edd6b2 ↗
- https://git.kernel.org/stable/c/c3496314c53e7e82ddb544c825defc3e8c0e45cf ↗
- https://git.kernel.org/stable/c/ec4eea14d75f7b0491194dd413f540dd19b8c733 ↗
- https://git.kernel.org/stable/c/fa5ef655615a01533035c6139248c5b33aa27028 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗
- https://lists.debian.org/debian-lts-announce/2024/10/msg00003.html ↗
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html ↗