Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-99999— ipv4: validate checksum_start before completing checksum

Quick assessment

Affected
Linux Linux
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Linux 内核中，已修复以下漏洞： IPv4：在计算并完善校验和之前，验证 checksum_start 当带有错误校验和元数据的数据包进入 IPv4 协议栈时， 函数可能损坏网络头，并引发一系列异常行为。 该漏洞由 Paulos 发现并报告，此后其他研究人员也独立重现了该问题。 我们本应阻止此类数据包进入系统，但作为纵深防御（defense in depth）措施，我们还应在完成校验和之前进行检查。 目前，输入端的更完整验证机制正在开发中，但仍需进一步工作。

CVSS 9.3 · Critical

Possible ATT&CK Techniques 1 AI

T1498 · Network Denial of Service

Affected Version Matrix 18

VendorProduct Version RangeStatus
Linux Linux f43798c27684ab925adde7d8acc34c78c6e50df8< a464d950f31c89565cbaae038cc60db04fe01956 affected
f43798c27684ab925adde7d8acc34c78c6e50df8< 0fab003ef4698e0628060a45a48f14b43ba2a40a affected
f43798c27684ab925adde7d8acc34c78c6e50df8< 94524b7b32691de2e2ce162c04d6cbc9106e5cbf affected
f43798c27684ab925adde7d8acc34c78c6e50df8< a65f69e0f38ffbed1b128029e09097436416dc8b affected
f43798c27684ab925adde7d8acc34c78c6e50df8< 32a8b0adaa18e52aaa0b246b5ffe683075354dbb affected
f43798c27684ab925adde7d8acc34c78c6e50df8< f3e835af6226f1dd12160cbd696081e9b6155de0 affected
f43798c27684ab925adde7d8acc34c78c6e50df8< c3e33464746166264334641dc850a36eef7e6326 affected
f43798c27684ab925adde7d8acc34c78c6e50df8< 6785011f8b16abf40b1e9d8b2e332232b3e68822 affected
… +10 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-99999

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
ipv4: validate checksum_start before completing checksum
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief. This was discovered and reported by Paulos, and has been reporoduced by others independently since. We really shouldn't allow such packets in, but as a defence in depth measure, let's also check before we complete the checksum. A more complete validation at input is forthcoming, but needs more work.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Linux Linux f43798c27684ab925adde7d8acc34c78c6e50df8 ~ a464d950f31c89565cbaae038cc60db04fe01956 -
Linux Linux 2.6.27 -

II. Public POCs for CVE-2026-99999

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-99999

请登录查看更多情报信息。

Security Blog Posts for CVE-2026-99999 (1)

Other References for CVE-2026-99999 (8)

Other References for CVE-2026-99999 (1)

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-99999

No comments yet

Leave a comment