TCP Packet Aggregation Flaw in Linux Kernel by Open Source Community

CVE-2026-80725

What is CVE-2026-80725?

A vulnerability in the Linux kernel related to TCP packet aggregation allows improper validation when using BIG TCP for certain protocols. Specifically, the aggregation limit of 64KB can be exceeded under specific circumstances. Function skb_gro_receive() became lenient, which permitted not only IPv4 and IPv6 packets but also non-IP protocols to pass checks, leading to potential out-of-bounds write issues. The validation for MAC header lengths and encapsulated packets was insufficient, thereby increasing the risk of exploitation. Fixes have been applied to enforce stricter checks for aggregated packets, ensuring the integrity and security of the network traffic in affected kernel versions prior to 7.0.

References