PT-2025-37228 · Linux+5 · Linux Kernel+5
Published
2025-08-14
·
Updated
2026-05-26
·
CVE-2025-39770
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A flaw exists in the Linux kernel related to Generic Segmentation Offload (GSO) and IPv6 packets with extension headers. Specifically, the kernel incorrectly requests checksum offload for IPv6 packets containing extension headers on devices that only support
IPV6 CSUM, which is not designed to handle such packets. This can lead to a skb warn bad offload warning and a reduction in network throughput as the device attempts an unsupported operation. The issue arises from a failure to disable checksum offload for packets with extension headers, such as those used in GREoIPv6 tunnels. The exception to this is BIG TCP extension, which is only enabled on devices that support BIG TCP TSO.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu