U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2024-44940

Change History

New CVE Received from kernel.org 8/26/2024 8:15:06 AM

Action Type Old Value New Value
Added Description

								
							
							
						
In the Linux kernel, the following vulnerability has been resolved:

fou: remove warn in gue_gro_receive on unsupported protocol

Drop the WARN_ON_ONCE inn gue_gro_receive if the encapsulated type is
not known or does not have a GRO handler.

Such a packet is easily constructed. Syzbot generates them and sets
off this warning.

Remove the warning as it is expected and not actionable.

The warning was previously reduced from WARN_ON to WARN_ON_ONCE in
commit 270136613bf7 ("fou: Do WARN_ON_ONCE in gue_gro_receive for bad
proto callbacks").
Added Reference

								
							
							
						
kernel.org https://git.kernel.org/stable/c/3db4395332e7050ef9ddeb3052e6b5019f2a2a59 [No types assigned]
Added Reference

								
							
							
						
kernel.org https://git.kernel.org/stable/c/440ab7f97261bc28501636a13998e1b1946d2e79 [No types assigned]
Added Reference

								
							
							
						
kernel.org https://git.kernel.org/stable/c/dd89a81d850fa9a65f67b4527c0e420d15bf836c [No types assigned]