TCP Offload Engine Issue in Linux Kernel by Vendor's Network Driver

CVE-2025-38331

What is CVE-2025-38331?

A vulnerability exists in the Linux kernel related to the interaction of TCP offload engine (TOE) and TCP segmentation offload (TSO) features. This flaw can lead to hardware instability, resulting in system crashes or lock-ups under load. When TOE is deactivated without TSO, the network driver becomes unstable, causing operational failures. To ensure reliable performance, both features must be enabled together, as their interaction is crucial for maintaining processing efficiency and system integrity. Comprehensive testing indicates that enabling TOE significantly stabilizes hardware performance during extensive networking tasks.

References