CVE-2024-42281

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-42281
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42281.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-42281
Downstream
Related
Published
2024-08-17T09:08:48.477Z
Modified
2026-05-28T03:55:26.618378579Z
Summary
bpf: Fix a segment issue when downgrading gso_size
Details

In the Linux kernel, the following vulnerability has been resolved:

bpf: Fix a segment issue when downgrading gso_size

Linearize the skb when downgrading gsosize because it may trigger a BUGON() later when the skb is segmented as described in [1,2].

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/42xxx/CVE-2024-42281.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
2be7e212d5419a400d051c84ca9fdd083e5aacac
Fixed
a689f5eb13a90f892a088865478b3cd39f53d5dc
Fixed
dda518dea60d556a2d171c0122ca7d9fdb7d473a
Fixed
f6bb8c90cab97a3e03f8d30e3069efe6a742e0be
Fixed
11ec79f5c7f74261874744039bc1551023edd6b2
Fixed
c3496314c53e7e82ddb544c825defc3e8c0e45cf
Fixed
ec4eea14d75f7b0491194dd413f540dd19b8c733
Fixed
fa5ef655615a01533035c6139248c5b33aa27028

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42281.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.13.0
Fixed
5.4.282
Type
ECOSYSTEM
Events
Introduced
5.5.0
Fixed
5.10.224
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.165
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.103
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.44
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.3

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-42281.json"