{"id":"EUVD-2026-102044","enisaUuid":"fa34427d-d06e-352d-8f42-ed8438e9bc3f","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: validate checksum_start before completing checksum\n\nIf a packet with bad checksum metadata gets into the ipv4 stack,\nskb_checksum_help can corrupt the network header and cause a bunch of\nmischief.\n\nThis was discovered and reported by Paulos, and has been reporoduced\nby others independently since.\n\nWe really shouldn\u0027t allow such packets in, but as a defence\nin depth measure, let\u0027s also check before we complete the checksum.\n\nA more complete validation at input is forthcoming, but needs more work.","datePublished":"Oct 15, 2026, 12:19:22 PM","dateUpdated":"Oct 17, 2026, 11:14:14 AM","baseScore":9.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","references":"https://git.kernel.org/stable/c/a464d950f31c89565cbaae038cc60db04fe01956\nhttps://git.kernel.org/stable/c/0fab003ef4698e0628060a45a48f14b43ba2a40a\nhttps://git.kernel.org/stable/c/94524b7b32691de2e2ce162c04d6cbc9106e5cbf\nhttps://git.kernel.org/stable/c/a65f69e0f38ffbed1b128029e09097436416dc8b\nhttps://git.kernel.org/stable/c/32a8b0adaa18e52aaa0b246b5ffe683075354dbb\nhttps://git.kernel.org/stable/c/f3e835af6226f1dd12160cbd696081e9b6155de0\nhttps://git.kernel.org/stable/c/c3e33464746166264334641dc850a36eef7e6326\nhttps://git.kernel.org/stable/c/6785011f8b16abf40b1e9d8b2e332232b3e68822\nhttps://pwn.ai/blog/pwnescape\nhttps://vercel.com/blog/findings-from-the-1-million-dollar-vercel-sandbox-challenge\n","aliases":"CVE-2026-99999\n","assigner":"Linux","epss":0.21,"enisaIdProduct":[{"id":"0209e4ac-b444-3504-9a6b-f3eb49412f05","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 7.2.11"},{"id":"0682b97b-2779-3212-ae41-bc573afbc57d","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 0"},{"id":"2edd3581-ae43-3a49-a337-f0f35c9aecec","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003c32a8b0adaa18e52aaa0b246b5ffe683075354dbb"},{"id":"44f9a20b-7873-3036-9bbd-e7eef69541f7","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 6.12.113"},{"id":"53b1add6-25d1-31d3-8c22-b53609818e68","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 5.10.272"},{"id":"5bfa3607-bd9a-330b-8c4d-7b49e8db68ab","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 6.1.190"},{"id":"8a689d28-fd42-3282-87e7-6bde2ac55c2d","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003c0fab003ef4698e0628060a45a48f14b43ba2a40a"},{"id":"8b63a1fb-9be4-374b-8d7a-25e3bd9f3172","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003c6785011f8b16abf40b1e9d8b2e332232b3e68822"},{"id":"9abfd5b2-b487-3ed6-b7a1-a7a73270ff18","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 5.15.223"},{"id":"9b3f7306-0d7c-31f7-8476-e01dd17bbdc1","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"2.6.27"},{"id":"9ea555f8-3f42-3a6f-b890-21565facfee3","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003ca65f69e0f38ffbed1b128029e09097436416dc8b"},{"id":"b0d206c1-d5e5-3a2a-bf82-bcd2dc234a85","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 6.6.159"},{"id":"b1454695-1b48-3600-9a89-d5a1fad78fce","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 7.3-rc7"},{"id":"beb6e2a2-b971-3de1-9e29-561586f530e9","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003ca464d950f31c89565cbaae038cc60db04fe01956"},{"id":"c333ace1-0886-326f-a6ee-e80caa530a88","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003cf3e835af6226f1dd12160cbd696081e9b6155de0"},{"id":"d20a902a-99f2-3f63-9349-e88e4de68875","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 6.18.57"},{"id":"de55fbda-cf5d-3318-9df7-5617b4cc401f","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003c94524b7b32691de2e2ce162c04d6cbc9106e5cbf"},{"id":"fff325d3-c913-3f5a-9695-31180802e50a","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003cc3e33464746166264334641dc850a36eef7e6326"}],"enisaIdVendor":[{"id":"3fa5c27a-0ddb-3432-868e-d57845c5cc27","vendor":{"name":"Linux"}}],"enisaIdVulnerability":[{"id":"07fed85c-9e57-33c0-a70e-7cf7ad8b9d53","vulnerability":{"id":"CVE-2026-99999","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nipv4: validate checksum_start before completing checksum\n\nIf a packet with bad checksum metadata gets into the ipv4 stack,\nskb_checksum_help can corrupt the network header and cause a bunch of\nmischief.\n\nThis was discovered and reported by Paulos, and has been reporoduced\nby others independently since.\n\nWe really shouldn\u0027t allow such packets in, but as a defence\nin depth measure, let\u0027s also check before we complete the checksum.\n\nA more complete validation at input is forthcoming, but needs more work.","datePublished":"Oct 15, 2026, 12:19:22 PM","dateUpdated":"Oct 17, 2026, 11:14:14 AM","status":"PUBLISHED","baseScore":9.3,"baseScoreVersion":"3.1","baseScoreVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","references":"https://git.kernel.org/stable/c/a464d950f31c89565cbaae038cc60db04fe01956\nhttps://git.kernel.org/stable/c/0fab003ef4698e0628060a45a48f14b43ba2a40a\nhttps://git.kernel.org/stable/c/94524b7b32691de2e2ce162c04d6cbc9106e5cbf\nhttps://git.kernel.org/stable/c/a65f69e0f38ffbed1b128029e09097436416dc8b\nhttps://git.kernel.org/stable/c/32a8b0adaa18e52aaa0b246b5ffe683075354dbb\nhttps://git.kernel.org/stable/c/f3e835af6226f1dd12160cbd696081e9b6155de0\nhttps://git.kernel.org/stable/c/c3e33464746166264334641dc850a36eef7e6326\nhttps://git.kernel.org/stable/c/6785011f8b16abf40b1e9d8b2e332232b3e68822\nhttps://pwn.ai/blog/pwnescape\nhttps://vercel.com/blog/findings-from-the-1-million-dollar-vercel-sandbox-challenge\n","enisa_id":"EUVD-2026-102044\n","assigner":"Linux","epss":0.21,"dataProcessed":"Oct 19, 2026, 12:00:10 PM","vulnerabilityProduct":[{"id":"03da2b38-9677-3f7f-bc42-9ee7db48d77d","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003c0fab003ef4698e0628060a45a48f14b43ba2a40a"},{"id":"0a0b0cc5-17bd-374d-80b7-483b57c86a6a","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 0"},{"id":"121fbd98-2961-31c4-9184-e1a211a4557f","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003ca65f69e0f38ffbed1b128029e09097436416dc8b"},{"id":"1d3c6e74-a1fc-3489-92fd-8f6c1b392acd","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 6.1.190"},{"id":"2aff3419-d624-3933-9c4e-1a2ed4ac7782","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 5.15.223"},{"id":"2c5290d6-2f76-37a6-b9b4-239fe8b6093d","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 7.2.11"},{"id":"2d62bcc6-b8bb-3a36-b8a6-6bc147a4addb","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 6.18.57"},{"id":"3501fcd0-7c4a-3131-8c9e-9ee14fc2be02","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 6.12.113"},{"id":"515dbae4-9826-3f1a-b047-c4e8dfee199d","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 6.6.159"},{"id":"6c14785e-3bad-3ac8-8ee9-7ee5abe3ea87","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 7.3-rc7"},{"id":"6f669892-140e-3202-9346-1ca946c23751","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"2.6.27"},{"id":"754307c0-d92a-3962-bb46-b753316e51cd","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003c6785011f8b16abf40b1e9d8b2e332232b3e68822"},{"id":"7cc5aadd-03ee-399b-b4f2-8747f4f00f9c","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003cf3e835af6226f1dd12160cbd696081e9b6155de0"},{"id":"99c61bd3-7d4f-3aaf-9d01-cb059be41738","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003cc3e33464746166264334641dc850a36eef7e6326"},{"id":"ad2f7a04-35eb-3a8b-bcab-227d584b3dcb","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003c32a8b0adaa18e52aaa0b246b5ffe683075354dbb"},{"id":"b52cfc28-0fdb-3fe9-b190-eb2d76a66122","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"patch: 5.10.272"},{"id":"cd123862-f1e1-3bfb-a604-f2d45c961729","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003ca464d950f31c89565cbaae038cc60db04fe01956"},{"id":"e2d957d5-542b-3eec-88c7-9167d96efcb4","product":{"name":"Linux","vendor":{"name":"Linux"}},"product_version":"f43798c27684ab925adde7d8acc34c78c6e50df8 \u003c94524b7b32691de2e2ce162c04d6cbc9106e5cbf"}],"vulnerabilityVendor":[{"id":"9d0f4e6f-4588-3ccd-bc77-af4ed2f4193f","vendor":{"name":"Linux"}}]}}],"enisaIdAdvisory":[{"id":"b54f70c5-e9f4-30c5-b9b8-60d88b4a589a","advisory":{"id":"msrc_CVE-2026-99999","description":"ipv4: validate checksum_start before completing checksum","datePublished":"Oct 16, 2026, 1:07:47 AM","dateUpdated":"Oct 16, 2026, 2:43:16 PM","baseScore":0.0,"references":"https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-99999.json\n","aliases":"CVE-2026-99999\n","source":{"id":20,"name":"csaf_microsoft"},"advisoryProduct":[{"id":"4dd0aa2a-0fcb-34f1-b8a3-036820f25e9d","product":{"name":"Azure Linux","vendor":{"name":"Microsoft"}}},{"id":"5cae1fe8-08fc-3169-89f3-bfef074b0444","product":{"name":"azl3 kernel 0:6.6.158.1-1.azl3","vendor":{"name":"Microsoft"}}},{"id":"60fac00a-44b8-3227-b9af-2c1abeee149f","product":{"name":"Kernel","vendor":{"name":"Linux"}}},{"id":"bef9d94a-5ed8-3b54-9d1c-bdc4ddf28cbb","product":{"name":"3.0","vendor":{"name":"Wind River"}}}]}}]}