CVE-2025-38124

A denial of service vulnerability has been discovered in the Linux kernel's UDP Generic Segmentation Offload (GSO) functionality. This flaw allows a local, unprivileged user to trigger a kernel crash by generating UDP packets with a specially malformed frag_list geometry. Successful exploitation of this vulnerability could lead to a system crash, severely impacting the availability and stability of the affected system.

This vulnerability in the Linux kernel's UDP Generic Segmentation Offload (GSO) path allows specially crafted packets with malformed frag_list geometry to trigger a kernel BUG within the skb_segment() function. This occurs when only a portion of the packet data is pulled into the linear part of the SKB (Socket Buffer), violating assumptions made by the segmentation logic. If these malformed SKBs are not linearized, the kernel will crash due to invariant violations, leading to a denial-of-service.

While the CVSS privileges are rated as Low, meaning unprivileged users can potentially construct such malicious SKBs via AF_PACKET sockets, BPF hooks, or containerized networking interfaces, the impact remains a system-level denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.