skb scrubbing

About this tag
The skb scrubbing tag on WindowsForum.com covers discussions about Linux kernel socket buffer (skb) metadata scrubbing, particularly in the context of BPF packet redirection and network namespace isolation. A recent thread addresses CVE-2025-37959, a vulnerability where skb metadata from one network namespace could persist after a bpf_redirect_peer operation, breaking container networking in environments like Cilium-managed clusters. The fix ensures proper scrubbing of skb fields to prevent integrity and availability risks. While the tag is Linux-focused, it may interest Windows IT professionals managing cross-platform or containerized environments where kernel networking behavior impacts security and stability.
  1. Linux Kernel BPF Redirect skb Scrubbing Fix CVE-2025-37959

    The Linux kernel received a targeted fix for CVE-2025-37959 — a BPF-related packet-scrubbing bug that could cause *socket buffer (skb) metadata from one network namespace to be preserved and misapplied after a bpf_redirect_peer redirection — a behavior which broke container networking (notably...