VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Aug 10, 2026· Updated Oct 19, 2026

CVE-2026-68123

CVE-2026-68123

Description

In the Linux kernel, the following vulnerability has been resolved:

openvswitch: fix GSO userspace truncation underflow

OVS_ACTION_ATTR_TRUNC currently stores a delta from the original skb length in OVS_CB(skb)->cutlen. When a later userspace action segments a GSO skb, queue_gso_packets() reuses that delta for each smaller segment. A segment can then reach queue_userspace_packet() with cutlen greater than skb->len, underflowing the length passed to skb_zerocopy().

Store the maximum preserved length instead and bound each consumer against the current skb length. Use U32_MAX as the no-truncation sentinel so the value remains valid if skb geometry changes before a consumer handles it.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

91

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.