Checksum Offload Error in Linux Kernel Affects Network Integrity

CVE-2025-40337

What is CVE-2025-40337?

A vulnerability in the Linux kernel's stmmac driver could allow corrupt packets to bypass validation due to improper handling of checksum offload errors. The stmmac_rx function incorrectly set the skb->ip_summed status, failing to account for hardware-reported checksum errors. This mismanagement could result in the network stack processing invalid packets as valid. A recent patch rectifies this issue by ensuring the kernel accurately checks the status flag indicating a checksum error, thereby enabling it to properly validate packets and maintain network integrity.

References