CVE-2026-72046

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the gve driver where header buffer corruption occurs when header-split and HW-GRO (Hardware Generic Receive Offload) are enabled. The DQO RX datapath incorrectly indexes the header buffer by queue position instead of the buffer's identity during post and read operations. Specifically, the gve rx post buffers dqo function computes header buf addr from bufq->tail, and the gve rx dqo function reads the header from desc idx.

When HW-GRO is active with multiple flows, packets may be completed out of order, leading to two primary issues: the driver may copy a header belonging to a different packet, resulting in throughput drops and TCP retransmissions, or the driver may reuse and overwrite a header buffer while the device still owns it, corrupting subsequent packet headers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.