Critical Stability Vulnerability in Linux Kernel Affecting Debian Packages
Summary
CVE-2025-38331: In the Linux kernel, the following vulnerability has been resolved: net: ethernet: cortina: Use TOE/TSO on all TCP It is desireable to push the hardware accelerator to also process non-segmented TCP frames: we pass the s... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Debian operating system, responsible for managing hardware and system resources. It provides essential services for all other software running on the system. The kernel supports various functionalities, including process management, memory management, and device control. The vulnerability in question affects the Ethernet subsystem, specifically the TCP Offload Engine (TOE) and TCP Segmentation Offload (TSO) features, which are crucial for efficient network performance.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the Ethernet subsystem related to the handling of non-segmented TCP frames. The issue arises when the TOE and TSO features are not properly managed, leading to potential instability, system lock-ups, and crashes. This vulnerability can severely impact network performance and reliability, especially under heavy load conditions, as it disrupts the normal processing of TCP connections.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, users can disable the TOE and TSO features in their network configuration. This can be done by using the following command: 'ethtool -K <interface> tso off' and 'ethtool -K <interface> gso off', replacing <interface> with the name of the network interface.
Conclusion
The identified vulnerability in the Linux kernel poses significant risks to system stability and network performance. Users of Debian 11, 12, and 13 should take immediate action to update their systems to the patched version or implement the suggested workarounds to maintain system integrity.
See every vulnerability recorded for linux →
FAQ
The vulnerability affects the Linux kernel's Ethernet subsystem, specifically the handling of TCP frames, leading to system instability.
Debian 11, 12, and 13 are affected, with specific fixes available for Debian 13.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software without requiring code access.
Failure to address this vulnerability may result in system crashes, instability, and degraded network performance.
Yes, disabling the TOE and TSO features can serve as a temporary workaround to mitigate the risk.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
