CVE-2026-45952

kernel: eth: fbnic: Add validation for MTU changes

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's fbnic driver. This vulnerability allows a local user to cause a Denial of Service (DoS) by increasing the Maximum Transmission Unit (MTU) beyond the hardware's threshold while an eXpress Data Path (XDP) program is attached. This improper validation of MTU changes leads to the driver dropping all multi-fragmented network frames, effectively breaking new TCP connections.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-1284 · Improper Validation of Specified Quantity in Input