Fragment Overflow Issue in Aquantia NIC Drivers by Linux

CVE-2025-68301

What is CVE-2025-68301?

In the Linux kernel, the Aquantia AQC113 NIC drivers suffer from a fragment overflow issue that occurs during the handling of large multi-descriptor packets. When the driver processes packets with an excessive number of fragments, it can lead to an out-of-bounds write in the skb_add_rx_frag_netmem() function. This results in a kernel panic due to the fragment index exceeding the allocated bounds. The vulnerability is addressed by ensuring proper checks are implemented for the number of fragments processed, thus preventing potential crashes in production environments.

References