CVE-2024-42281

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50

Description The issue is related to a component in the Linux kernel, specifically with the bpf, which has a problem with incorrect input validation. This can lead to a denial of service when exploited. The problem arises when downgrading gso size, which may trigger a BUG ON() later when the skb is segmented.

Recommendations To resolve the issue, update the Linux kernel to version 6.6.50 or later. As a temporary workaround, consider restricting access to the bpf component until a patch is available.