DEBIAN-CVE-2026-64355

In the Linux kernel, the following vulnerability has been resolved:  bpf: Reject fragmented frames in devmap  Devmap broadcast redirects clone the packet for all but the last destination.  For native XDP, that clone path copies only the linear xdpframe data, while fragmented frames keep skbsharedinfo in tailroom outside the linear area. Cloning such a frame leaves XDPFLAGSHASFRAGS set but without valid frag metadata, and the later free path can interpret uninitialized tail data as skbsharedinfo, leading to an out-of-bounds access during frame return.  Reject fragmented native XDP frames in devmapenqueueclone().  Add the same restriction to the generic XDP clone path in devmapredirectclone(). Generic XDP represents fragmented packets as nonlinear skbs, and rejecting them here keeps clone-based broadcast support aligned between native and generic XDP.