The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4 when Generic Receive Offload (GRO) is enabled resets certain fields in incorrect situations which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.