In the Linux kernel, the following vulnerability has been resolved:
ipv4: account for fraggap on the paged allocation path
In __ip_append_data(), when the paged-allocation branch is taken,
alloclen and pagedlen are computed as
alloclen = fragheaderlen + transhdrlen;
pagedlen = datalen - transhdrlen;
datalen already includes fraggap, but the fraggap bytes carried over
from the previous skb are copied into the new skb's linear area at
offset transhdrlen by the subsequent skb_copy_and_csum_bits(). The
linear area is therefore undersized by fraggap bytes while pagedlen is
overstated by the same amount.
The non-paged branch sets alloclen to fraglen, which already accounts
for fraggap because datalen does. Bring the paged branch in line by
adding fraggap to alloclen and subtracting it from pagedlen.
After this adjustment, copy no longer collapses to -fraggap on the
paged path, so remove the stale comment describing that old arithmetic.
References
Configurations
Configuration 1 (hide)
|
History
24 Jul 2026, 15:18
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
22 Jul 2026, 19:07
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://git.kernel.org/stable/c/77798d7be6ef71e72fb6fc8a2901bf74ebc9706f - Patch | |
| References | () https://git.kernel.org/stable/c/a9c24eda24bd15f432e37824e6fc440977cb241c - Patch | |
| References | () https://git.kernel.org/stable/c/c04d9ece23deb9e26c19f9ca215e98b3295aa1bb - Patch | |
| References | () https://git.kernel.org/stable/c/ce494707a9c07f27c219ca67f3e138061f53d9b3 - Patch | |
| References | () https://git.kernel.org/stable/c/eca856950f7cb1a221e02b99d758409f2c5cec42 - Patch | |
| CPE | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | |
| First Time |
Linux linux Kernel
Linux |
|
| CWE | NVD-CWE-noinfo |
18 Jul 2026, 08:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
16 Jul 2026, 06:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-07-16 06:16
Updated : 2026-07-24 15:18
NVD link : CVE-2026-53366
Mitre link : CVE-2026-53366
CVE.ORG link : CVE-2026-53366
JSON object : View
Products Affected
linux
- linux_kernel
CWE