Critical Vulnerability in Linux Kernel: Tx L4 Checksum Offload Issue
Summary
DEBIAN-CVE-2025-22101: In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix Tx L4 checksum The hardware only supports L4 checksum offload for TCP/UDP/SCTP protocol. Affects linux versions < 6.12.37-1. Fixed in 6.12.37-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It is widely used across various platforms, including servers, desktops, and embedded systems. The kernel's networking stack is crucial for handling data transmission, and any vulnerabilities can lead to significant operational issues.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified related to the Tx L4 checksum offload functionality. This issue arises from a bug that incorrectly sets the Tx checksum flag for protocols other than TCP, UDP, and SCTP. As a result, this can cause the Tx ring to hang, leading to potential data transmission failures and degraded network performance. The vulnerability is particularly concerning as it affects the reliability of network communications across systems utilizing the kernel.
How To Fix
Minimum fixed version
6.12.37-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the patch by updating to the fixed version of the Linux kernel.
Conclusion
The identified vulnerability in the Linux kernel regarding Tx L4 checksum offload poses significant risks to network performance and reliability. Users are strongly advised to update to the patched version 6.12.37-1 to safeguard their systems. Regular monitoring for vulnerabilities, such as through tools like Vulert, can help maintain system security.
See every vulnerability recorded for linux →
FAQ
The vulnerability involves a bug in the Linux kernel's handling of Tx L4 checksum offload, which can cause network transmission issues.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
If exploited, this vulnerability can lead to network transmission failures, causing degraded performance and reliability issues in affected systems.
Yes, the vulnerability has been patched in version 6.12.37-1 of the Linux kernel.
While there are no specific workarounds, it is recommended to prioritize updating your kernel as soon as possible to mitigate the risks associated with this vulnerability.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
