Executive Summary

This vulnerability exists in the Linux kernel's fbnic driver related to MTU (Maximum Transmission Unit) changes. Specifically, increasing the MTU beyond the HDS threshold causes the hardware to fragment packets across multiple buffers. If a single-buffer XDP (eXpress Data Path) program is attached, the driver will drop all multi-fragment frames. While remote senders can still send non-TCP packets larger than the MTU, this vulnerability can cause users to inadvertently break new TCP streams because the driver does not prevent increasing the MTU after an XDP program is attached.

Useful 0 Not Useful 0

Impact Analysis

The impact of this vulnerability is that network communication can be disrupted. When the MTU is increased beyond a certain threshold after attaching a single-buffer XDP program, the driver drops multi-fragment frames. This can lead to dropped packets and broken TCP streams, potentially causing network instability or degraded performance for applications relying on TCP connections.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, ensure that the MTU is not increased after attaching an XDP program on the fbnic driver.

Specifically, avoid increasing the MTU beyond the hardware's HDS threshold once XDP is attached, as the driver currently prevents attaching XDP when MTU is too high but does not prevent MTU increases afterward.

Useful 0 Not Useful 0