CVE-2024-49979

A flaw was found in the Linux kernel's Generic Segmentation Offload (GSO) feature, specifically in how it handles TCP (Transmission Control Protocol) fraglist segmentation. When certain network operations, such as Network Address Translation (NAT) or BPF (Berkeley Packet Filter) programs, modify network packets, they can corrupt the expected structure of these packets. This corruption can lead to a null pointer dereference, which is a critical error that can cause the system to crash or become unresponsive, effectively creating a Denial of Service (DoS) condition for network traffic.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.