CVE-2026-90063: Linux 5.7

Affected technology

Linux · 7c6d2ecbda83150b2036a2b36b21381ad4667762 to before d3d111fe809773edbb4ae121e36253b7d683509a, 7c6d2ecbda83150b2036a2b36b21381ad4667762 to before 8f6667a081887c2b59c6f3dd86c1789ada563762, 7c6d2ecbda83150b2036a2b36b21381ad4667762 to before 339f47ae04dcc6b5a730dd6bc70dddc8937c3260, 7c6d2ecbda83150b2036a2b36b21381ad4667762 to before 29bd12c7c5f9d6cf855b87bace18f71e9607f9e8, 7c6d2ecbda83150b2036a2b36b21381ad4667762 to before 0e5ed3b98d1d8d251acfdccfeaa607453ad12954, 7c6d2ecbda83150b2036a2b36b21381ad4667762 to before 75c271c48f483af678e514734e10b2452410e08c, 7c6d2ecbda83150b2036a2b36b21381ad4667762 to before c27c449d455aafd9018a3cbab150f1c42c87923f, bfbaf151efe491e30697e21c8b7ae1b615480873, 6c83456601e65a6dd371ddf595510183d198e9b1, b3ebd9830c6026c98f03f7047c9d608573773f13, b96fb681ca789629b8ba3da99ca3b2e6fa807f0a, 4.14.187 to before 4.15, 4.19.131 to before 4.20, 5.4.46 to before 5.5, 5.6.18 to before 5.7
Linux

Linux · 5.7
Linux

Component: Not specified by the source
File: include/linux/virtio_net.h

What an attacker can do

T overflow gso_segs The user can specify any gso_size in a packet crafted with an AF_PACKET PACKET_VNET_HDR socket, even smaller than TCP_MIN_GSO_SIZE = 8.