Threats tagged 'ghsa-3mv7-84x4-8439'

A vulnerability in the Linux kernel's virtio-net driver involves an incorrect length check when handling large packets. The issue arises because the buffer length check was not updated after changes to how buffer sizes are allocated based on negotiated MTU, potentially leading to a NULL page pointer dereference. This flaw can cause denial of service and compromise confidentiality, integrity, and availability. The vulnerability is tracked as CVE-2025-40292 and is rated high severity.