Volerion logoVolerion
Volerion logoVolerion

Linux Kernel Virtio-Net Unused Hash Field Zeroing Vulnerability

Vulnerability

A vulnerability in the Linux kernel's virtio-net implementation can lead to information leakage during GSO tunnel negotiations. The issue arises because the function 'virtio_net_hdr_tnl_from_skb()' fails to zero out unused hash fields, potentially allowing residual data to be exposed to the other side. This vulnerability affects the Linux kernel stable tree.

Impact

The vulnerability could result in unintended information disclosure between network peers.

Remediation

Users can upgrade to the latest version of the Linux kernel stable tree to address this vulnerability.

Added: Dec 4, 2025, 4:56 PM
Updated: Dec 4, 2025, 5:55 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
7.7
relevance
1.2
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.