IPv4 Stack Vulnerability in Linux Kernel Affecting Network Security
CVE-2026-99999

9.3CRITICAL

Key Information:

Vendor

Linux

Status
Vendor
CVE Published:
15 October 2026

What is CVE-2026-99999?

A vulnerability in the Linux kernel's IPv4 stack involves improper validation of checksum metadata, allowing packets with bad checksums to enter the system. This can lead to corruption of the network header through the skb_checksum_help function, potentially resulting in unpredictable behavior and security risks. As a defense mechanism, additional validation checks are being introduced to preemptively address these flaws and safeguard network integrity.

Affected Version(s)

Linux f43798c27684ab925adde7d8acc34c78c6e50df8

Linux f43798c27684ab925adde7d8acc34c78c6e50df8 < 0fab003ef4698e0628060a45a48f14b43ba2a40a

Linux f43798c27684ab925adde7d8acc34c78c6e50df8 < 94524b7b32691de2e2ce162c04d6cbc9106e5cbf

References

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.