Buffer Overflow Vulnerability in Linux Kernel Affecting Checksum Calculations

CVE-2026-68385

What is CVE-2026-68385?

A vulnerability has been identified in the Linux kernel concerning the csum_partial() function. This issue arises when csum_partial() calls csum_copy() with the copy parameter set to false and the destination buffer set to NULL. In situations where the vector facility is not present, csum_copy() mistakenly resorts to the cksm() function with a destination address of zero rather than from the intended source buffer. To rectify this, the fallback mechanism has been adjusted to ensure that the source buffer is used in the checksum calculations. This modification provides a more accurate checksum processing, mitigating potential risks associated with erroneous data handling.

References