CVE-2024-45030
A critical vulnerability in the Linux kernel's igb driver causes payload corruption during network transmission when MAX_SKB_FRAGS is set too high. The issue arises from improper handling of buffer sizes, leading to data corruption. A fix exists in updated kernel versions that address this buffer size calculation.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Systems using the igb network driver in Linux kernels, particularly versions 6.11 and earlier.
Real-world impact
Could allow attackers to corrupt transmitted data, potentially leading to service disruption or data integrity issues.
Why this severity
CVSS 9.8 (critical): High confidence in exploitation, high impact on confidentiality, integrity, and availability.
What to do about it
- 01Upgrade the Linux kernel to version 6.11 or later, which includes the fix for MAX_SKB_FRAGS handling.
- 02Apply the kernel update through standard package management tools (e.g., apt, yum) or vendor-provided tools.
NVD description stating the vulnerability has been resolved in updated kernel versions.
Timeline
- Sep 11, 2024 · Sep 11, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 5, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.