9.3
Critique
CVE-2026-99999 In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing…
Description
In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief. This was discovered and reported by Paulos, and has been reporoduced by others independently since. We really shouldn't allow such packets in, but as a defence in depth measure, let's also check before we complete the checksum. A more complete validation at input is forthcoming, but needs more work.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux 7.3 | premières → < 7.3 | 7.3 |
| Linux 7.2 | premières → < 7.2.11 | 7.2.11 |
| Linux 6.18 | premières → < 6.18.57 | 6.18.57 |
| Linux 6.12 | premières → < 6.12.113 | 6.12.113 |
| Linux 6.6 | premières → < 6.6.159 | 6.6.159 |
| Linux 6.1 | premières → < 6.1.190 | 6.1.190 |
| Linux 5.15 | premières → < 5.15.223 | 5.15.223 |
| Linux 5.10 | premières → < 5.10.272 | 5.10.272 |
| Linux | 2.6.27 | Pas de correctif indiqué |
Autres CVE de Linux
Les 18300 CVE de Linux →
CVE-2026-99284
net: skbuff: propagate shared-frag marker in skb_zerocopy()
Non notée
CVE-2026-99283
netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets
Non notée
CVE-2026-99279
ksmbd: reclaim ended sessions on logoff and expiration
Non notée
CVE-2026-99281
tun: Require CAP_NET_ADMIN to attach to an ownerless device
Non notée