Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
Linux Linux — igb: cope with large MAX_SKB_FRAGS
AV AC PR UI S C I A CVSS EPSS %ile KEV
L L L N U N N H 5.5 .0048 39.4 —
AFFECTED
Product Versions Fixed
Linux 3948b05950fdd64002a5f182c65ba5cf2d53cf71 – —
Linux 6.4 – 6.6.48
TIMELINE
Aug 21 Reserved by Linux
Sep 11 Published (CNA: Linux)
Aug 4 RESCORED — CVE-2024-45030 (Linux). CVSS 9.8 → 5.5 (NVD).
Description
In the Linux kernel, the following vulnerability has been resolved:
igb: cope with large MAX_SKB_FRAGS
Sabrina reports that the igb driver does not cope well with large
MAX_SKB_FRAG values: setting MAX_SKB_FRAG to 45 causes payload
corruption on TX.
An easy reproducer is to run ssh to connect to the machine. With
MAX_SKB_FRAGS=17 it works, with MAX_SKB_FRAGS=45 it fails. This has
been reported originally in
https://bugzilla.redhat.com/show_bug.cgi?id=2265320
The root cause of the issue is that the driver does not take into
account properly the (possibly large) shared info size when selecting
the ring layout, and will try to fit two packets inside the same 4K
page even when the 1st fraglist will trump over the 2nd head.
Address the issue by checking if 2K buffers are insufficient.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
| August 21, 2024 | Reserved | Reserved by Linux |
| September 11, 2024 | Published | Published (CNA: Linux) |
| August 4, 2026 | RESCORED | RESCORED — CVE-2024-45030 (Linux). CVSS 9.8 → 5.5 (NVD). |
Affected
Affected products and packages — 2 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
| Linux | Linux | — | 3948b05950fdd64002a5f182c65ba5cf2d53cf71 | — |
| Linux | Linux | — | 6.4 | 6.6.48 |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2024-45030 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.