CVE-2026-46273: ibmveth: Disable GSO for packets with small MSS
ibmveth: Disable GSO for packets with small MSS
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1 - Upgrade
Upgrade
Linux kernel network stack (ibmvnic/ibmveth)to a version that resolves this vulnerability.Patch commit <f10b09ef687f>
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46273?
CVE-2026-46273 has a risk score of 37.
What does CVE-2026-46273 refer to?
CVE-2026-46273 refers to a vulnerability in the ibmveth driver of the Linux kernel related to segmentation offload for packets with small Maximum Segment Size (MSS).
How do I fix CVE-2026-46273?
To fix CVE-2026-46273, ensure that you update to the latest patched version of the Linux kernel that addresses this vulnerability.
Who is affected by CVE-2026-46273?
CVE-2026-46273 affects users of the ibmveth driver on Power systems, particularly those using physical adapters that do not support segmentation offload for small MSS values.
What are the consequences of CVE-2026-46273?
The consequences of CVE-2026-46273 include potential adapter freezes when sending packets with an MSS of less than 224 bytes, impacting system stability.