Threats tagged 'ghsa-rf58-pp6r-5653'

CVE-2024-49978 is a medium severity vulnerability in the Linux kernel's UDP Generic Segmentation Offload (GSO) fraglist handling. It arises when optional datapath hooks like NAT or BPF modify GSO fraglist skbs, breaking expected invariants and causing corrupted skb geometry. This can lead to a NULL pointer dereference in the UDP segmentation code, resulting in a denial of service. The fix involves detecting corrupted skb geometry and passing such skbs to a safer segmentation function to avoid crashes.