PT-2026-51985 · Linux · Linux

Publicado

2026-06-24

Atualizado

2026-06-24

CVE-2026-53091

Nenhuma

Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.

In the Linux kernel, the following vulnerability has been resolved:

net: pull headers in qdisc pkt len segs init()

Most ndo start xmit() methods expects headers of gso packets to be already in skb->head.

net/core/tso.c users are particularly at risk, because tso build hdr() does a memcpy(hdr, skb->data, hdr len);

qdisc pkt len segs init() already does a dissection of gso packets.

Use pskb may pull() instead of skb header pointer() to make sure drivers do not have to reimplement this.

Some malicious packets could be fed, detect them so that we can drop them sooner with a new SKB DROP REASON SKB BAD GSO drop reason.

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2026-53091

Linux