CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's traffic control subsystem, specifically the act_ct module, where fragmented packets lose critical queueing metadata due to improper handling of the skb control buffer during defragmentation. This can lead to unexpected behavior, including potential system warnings or crashes when certain configurations are enabled. Organizations using Linux systems that rely on advanced traffic control features should prioritize patching this vulnerability to maintain system stability and performance.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: preserve tc_skb_cb across defragmentation tcf_ct_handle_fragments() calls nf_ct_handle_fragments() without saving and restoring skb->cb. The defrag helper clears IPCB/IP6CB, which aliases the tc_skb_cb/qdisc_skb_cb control buffer. Fragmented traffic through act_ct therefore loses qdisc metadata such as pkt_segs and can trigger WARN_ON_ONCE() in qdisc_pkt_segs() when panic_on_warn is enabled. Save and restore the full tc_skb_cb around nf_ct_handle_fragments(), matching the pattern used by ovs_ct_handle_fragments().