CVE-2026-99999
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
ipv4: validate checksum_start before completing checksum
In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief. This was discovered and reported by Paulos, and has been reporoduced by others independently since. We really shouldn't allow such packets in, but as a defence in depth measure, let's also check before we complete the checksum. A more complete validation at input is forthcoming, but needs more work.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| f43798c27684ab925adde7d8acc34c78c6e50df8 | affected | git | a464d950f31c89565cbaae038cc60db04fe01956 | Unavailable | None listed |
| f43798c27684ab925adde7d8acc34c78c6e50df8 | affected | git | 0fab003ef4698e0628060a45a48f14b43ba2a40a | Unavailable | None listed |
| f43798c27684ab925adde7d8acc34c78c6e50df8 | affected | git | 94524b7b32691de2e2ce162c04d6cbc9106e5cbf | Unavailable | None listed |
| f43798c27684ab925adde7d8acc34c78c6e50df8 | affected | git | a65f69e0f38ffbed1b128029e09097436416dc8b | Unavailable | None listed |
| f43798c27684ab925adde7d8acc34c78c6e50df8 | affected | git | 32a8b0adaa18e52aaa0b246b5ffe683075354dbb | Unavailable | None listed |
| f43798c27684ab925adde7d8acc34c78c6e50df8 | affected | git | f3e835af6226f1dd12160cbd696081e9b6155de0 | Unavailable | None listed |
| f43798c27684ab925adde7d8acc34c78c6e50df8 | affected | git | c3e33464746166264334641dc850a36eef7e6326 | Unavailable | None listed |
| f43798c27684ab925adde7d8acc34c78c6e50df8 | affected | git | 6785011f8b16abf40b1e9d8b2e332232b3e68822 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 2.6.27 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 2.6.27 | Unavailable | None listed |
| 5.10.272 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.223 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.190 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.159 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.113 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.57 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.2.11 | unaffected | semver | Unavailable | 7.2.* | None listed |
| 7.3 | unaffected | original_commit_for_fix | Unavailable | * | None listed |