CVE-2024-45030: igb: cope with large MAX_SKB_FRAGS
igb: cope with large MAXSKBFRAGS
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 5.10.223-1Fixed in 5.10.234-1Fixed in 6.1.129-1Fixed in 6.1.135-1Fixed in 6.12.25-1Fixed in 6.12.27-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Patch igb: cope with large MAX_SKB_FRAGS - Configuration
If feasible as a workaround, set MAX_SKB_FRAG to 17 because MAX_SKB_FRAGS=17 works while MAX_SKB_FRAGS=45 causes payload corruption on TX.
igb driver (Linux) MAX_SKB_FRAG = 17
Event History
Frequently Asked Questions
What is the severity of CVE-2024-45030?
CVE-2024-45030 has been identified as a moderate severity vulnerability affecting the Linux kernel.
How do I fix CVE-2024-45030?
To fix CVE-2024-45030, update the Linux kernel to a version that is above the affected ranges, such as 5.10.223-1 or 6.12.11-1.
What systems are affected by CVE-2024-45030?
CVE-2024-45030 affects specific versions of the Linux kernel, including versions between 6.4 to 6.6.48 and 6.7 to 6.10.7.
What is the impact of CVE-2024-45030?
The impact of CVE-2024-45030 includes potential payload corruption during transmission due to improper handling of large MAX_SKB_FRAG values by the igb driver.
Is CVE-2024-45030 exploitable remotely?
CVE-2024-45030 may be exploitable if an attacker can transmit specially crafted packets to the vulnerable system.