{"id":"CVE-2026-99999","published":"2026-10-15T13:17:14.137","lastModified":"2026-10-16T16:23:05.347","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: validate checksum_start before completing checksum\n\nIf a packet with bad checksum metadata gets into the ipv4 stack,\nskb_checksum_help can corrupt the network header and cause a bunch of\nmischief.\n\nThis was discovered and reported by Paulos, and has been reporoduced\nby others independently since.\n\nWe really shouldn't allow such packets in, but as a defence\nin depth measure, let's also check before we complete the checksum.\n\nA more complete validation at input is forthcoming, but needs more work.","cvssScore":9.3,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/0fab003ef4698e0628060a45a48f14b43ba2a40a","tags":[]},{"url":"https://git.kernel.org/stable/c/32a8b0adaa18e52aaa0b246b5ffe683075354dbb","tags":[]},{"url":"https://git.kernel.org/stable/c/6785011f8b16abf40b1e9d8b2e332232b3e68822","tags":[]},{"url":"https://git.kernel.org/stable/c/94524b7b32691de2e2ce162c04d6cbc9106e5cbf","tags":[]},{"url":"https://git.kernel.org/stable/c/a464d950f31c89565cbaae038cc60db04fe01956","tags":[]},{"url":"https://git.kernel.org/stable/c/a65f69e0f38ffbed1b128029e09097436416dc8b","tags":[]},{"url":"https://git.kernel.org/stable/c/c3e33464746166264334641dc850a36eef7e6326","tags":[]},{"url":"https://git.kernel.org/stable/c/f3e835af6226f1dd12160cbd696081e9b6155de0","tags":[]},{"url":"https://pwn.ai/blog/Pwnescape","tags":[]},{"url":"https://vercel.com/blog/findings-from-the-1-million-dollar-vercel-sandbox-challenge","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2026/10/15/5","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"The Linux kernel's IPv4 stack fails to properly validate checksum metadata before completing checksum calculations, allowing malformed packets to corrupt network headers and potentially cause system instability or arbitrary code execution. This vulnerability affects systems processing network traffic with bad checksum data.","exploitability":"Exploitation requires sending specially crafted packets with invalid checksum metadata to a target system, making it moderately difficult but possible given network access to the vulnerable kernel.","blast_radius":"The vulnerability could impact any Linux system running a kernel version affected by this checksum validation flaw, potentially causing widespread network disruption and system instability across connected devices.","remediation":"Upgrade to Linux kernel version 6.10 or later which contains the fix for this checksum validation issue.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["kernel","network","dos"],"model":"garnet-coder","analyzedAt":"2026-10-16T08:48:11.503Z"}}