CVE-2026-80725

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.0

Description An issue exists in the Generic Receive Offload (GRO) implementation where BIG TCP aggregation criteria are not properly validated. When aggregating packets exceeding 64KB, the skb gro receive() function fails to strictly verify the protocol and headroom. This allows crafted frames to trigger an out-of-bounds write during the insertion of a temporary Hop-by-Hop (HBH) jumbo header, as the memmove() operation may start before the socket buffer head. Additionally, the check incorrectly allows non-IP protocols, such as software VLANs, and encapsulated flows to aggregate beyond the 64KB limit.

Recommendations Update the Linux kernel to version 7.0 or later.