SB2026062691 - Improper input validation in Linux kernel core

Description

This security bulletin contains information about 1 vulnerability.

1) Improper input validation (CVE-ID: CVE-2026-53235)

CWE-ID: CWE-20 - Improper input validation

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local attacker to cause a denial of service.

The vulnerability exists due to improper input validation in skb_gro_receive_list() when processing GRO packets with non-linear skb data. A local attacker can trigger the vulnerable code path with a crafted packet state to cause a denial of service.

The issue can occur when an skb arrives via napi_gro_frags() with a zero skb_headlen and a non-zero GRO offset, leading to a BUG_ON condition in __skb_pull().

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/0cde3a004119db637b401c54e77536e4145fc0b4
• https://git.kernel.org/stable/c/848571dcbbbea7ba44dd4f7ebe1fbb274afe08ac
• https://git.kernel.org/stable/c/9e636c995b7beeb74ea882968248752821c244c4
• https://git.kernel.org/stable/c/f2bb3434544454099a5b6dec213567267b05d79d