CVE-2024-44940

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to the function gue gro receive() in the Linux kernel, which has a problem with incorrect input validation. This can potentially impact the confidentiality, integrity, and availability of protected information. The vulnerability is related to the handling of unsupported protocols in the gue gro receive() function. A packet can be easily constructed to trigger a warning, which was previously reduced from WARN ON to WARN ON ONCE. The warning has been removed as it is expected and not actionable.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.