CVE-2024-44940

fou: remove warn in gue_gro_receive on unsupported protocol

State: Published
Severity: 7.5 High
Published: Aug 26, 2024
Updated: Aug 5, 2026
Reserved: Aug 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

fou: remove warn in gue_gro_receive on unsupported protocol

Drop the WARN_ON_ONCE inn gue_gro_receive if the encapsulated type is not known or does not have a GRO handler.

Such a packet is easily constructed. Syzbot generates them and sets off this warning.

Remove the warning as it is expected and not actionable.

The warning was previously reduced from WARN_ON to WARN_ON_ONCE in commit 270136613bf7 ("fou: Do WARN_ON_ONCE in gue_gro_receive for bad proto callbacks").

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	37dd0247797b168ad1cc7f5dbec825a1ee66535b to before a925a200299a6dfc7c172f54da6f374edc930053Affected 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before b1453a5616c7bd8acd90633ceba4e59105ba3b51Affected 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 5a2e37bc648a2503bf6d687aed27b9f4455d82ebAffected 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 3db4395332e7050ef9ddeb3052e6b5019f2a2a59Affected 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 440ab7f97261bc28501636a13998e1b1946d2e79Affected 37dd0247797b168ad1cc7f5dbec825a1ee66535b to before dd89a81d850fa9a65f67b4527c0e420d15bf836cAffected
LinuxLinux	3.18Affected before 3.18Not affected 5.10.234 through 5.10.Not affected 5.15.174 through 5.15.Not affected 6.1.107 through 6.1.Not affected 6.6.47 through 6.6.Not affected 6.10.6 through 6.10.*Not affected 6.11 and laterNot affected

Product

Versions

LinuxLinux

37dd0247797b168ad1cc7f5dbec825a1ee66535b to before a925a200299a6dfc7c172f54da6f374edc930053Affected
37dd0247797b168ad1cc7f5dbec825a1ee66535b to before b1453a5616c7bd8acd90633ceba4e59105ba3b51Affected
37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 5a2e37bc648a2503bf6d687aed27b9f4455d82ebAffected
37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 3db4395332e7050ef9ddeb3052e6b5019f2a2a59Affected
37dd0247797b168ad1cc7f5dbec825a1ee66535b to before 440ab7f97261bc28501636a13998e1b1946d2e79Affected
37dd0247797b168ad1cc7f5dbec825a1ee66535b to before dd89a81d850fa9a65f67b4527c0e420d15bf836cAffected

LinuxLinux

3.18Affected
before 3.18Not affected
5.10.234 through 5.10.*Not affected
5.15.174 through 5.15.*Not affected
6.1.107 through 6.1.*Not affected
6.6.47 through 6.6.*Not affected
6.10.6 through 6.10.*Not affected
6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.