PT-2025-37228
CVE-2025-39770
·
Published
2025-08-14
·
Updated
2026-10-18
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A flaw exists in the Linux kernel related to Generic Segmentation Offload (GSO) and IPv6 packets with extension headers. Specifically, the kernel incorrectly requests checksum offload for IPv6 packets containing extension headers on devices that only support
IPV6 CSUM, which is not designed to handle such packets. This can lead to a skb warn bad offload warning and a reduction in network throughput as the device attempts an unsupported operation. The issue arises from a failure to disable checksum offload for packets with extension headers, such as those used in GREoIPv6 tunnels. The exception to this is BIG TCP extension, which is only enabled on devices that support BIG TCP TSO.Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾