CVE-2026-46273

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
03/06/2026
Last modified:
22/07/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ibmveth: Disable GSO for packets with small MSS<br /> <br /> Some physical adapters on Power systems do not support segmentation<br /> offload when the MSS is less than 224 bytes. Attempting to send such<br /> packets causes the adapter to freeze, stopping all traffic until<br /> manually reset.<br /> <br /> Implement ndo_features_check to disable GSO for packets with small MSS<br /> values. The network stack will perform software segmentation instead.<br /> <br /> The 224-byte minimum matches ibmvnic<br /> commit ("ibmvnic: Enforce stronger sanity checks<br /> on GSO packets")<br /> which uses the same physical adapters in SEA configurations.<br /> <br /> The issue occurs specifically when the hardware attempts to perform<br /> segmentation (gso_segs &gt; 1) with a small MSS. Single-segment GSO packets<br /> (gso_segs == 1) do not trigger the problematic LSO code path and are<br /> transmitted normally without segmentation.<br /> <br /> Add an ndo_features_check callback to disable GSO when MSS

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 4.2 (including) 5.10.258 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.11 (including) 5.15.209 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.16 (including) 6.1.175 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.2 (including) 6.6.140 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (including) 6.12.88 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (including) 6.18.30 (excluding)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.19 (including) 7.0.7 (excluding)
cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*