Linux Kernel virtio-net Overflow Vulnerability in virtnet_rq_alloc

A vulnerability in the Linux kernel's virtio-net implementation can lead to a buffer overflow in the virtnet_rq_alloc function. This issue arises when the fragment size is one page and the combined size of the buffer and virtnet_rq_dma exceeds one page, causing an overflow. The problem was introduced by a previous commit and has been causing reliable crashes or failures when transferring large files via SCP to a virtual machine, especially when a specific sysctl value is set.

Impact

Exploitation of this vulnerability can cause a buffer overflow, leading to potential memory corruption.

Remediation

Users can upgrade to the latest Linux version where this vulnerability has been addressed.