CVE-2026-99999

criticalpriority · track · 10EPSS 0.008 · 56 %ileexploit · PoCDEFRRU

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

14 exploits · PoC

Likely / severe?

0.79% (56th) EPSS

CVSS 9.3 · critical

Is it mine?

22 products

Check your exposure

Who says so?

3 sources

fstec_bdu · cert_bund · certfr

EPSS · scored 2026-10-27

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief. This was discovered and reported by Paulos, and has been reporoduced by others independently since. We really shouldn't allow such packets in, but as a defence in depth measure, let's also check before we complete the checksum. A more complete validation at input is forthcoming, but needs more work.

cvss

Technical severity, 0–10. One row per scoring source.

9.3

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.19.3criticalAV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.19.3criticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:Hsecondaryexploitability 2.5 · impact 6

v3.19.3criticalCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-20USCWE-20USCWE-787US

exploits (14)

Public proof-of-concept and weaponised exploit code.

affected products (22)

Products and version ranges known to be affected.

Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
Open Source Linux Kernelall versionscert_bundDEcpe:/o:linux:linux_kernel:unspecified
Oracle Linuxall versionscert_bundDEcpe:/o:oracle:linux:-
RESF Rocky Linuxall versionscert_bundDEcpe:/o:resf:rocky_linux:-
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
SUSE Linuxall versionscert_bundDEcpe:/o:suse:suse_linux:-
SUSE openSUSEall versionscert_bundDEcpe:/o:suse:opensuse:-
Red Hat, Inc. Red Hat Enterprise Linux≤ 9fstec_bduRU
Red Hat, Inc. Red Hat Enterprise Linux≤ 6fstec_bduRU
Red Hat, Inc. Red Hat Enterprise Linux≤ 7fstec_bduRU
Red Hat, Inc. Red Hat Enterprise Linux≤ 8fstec_bduRU
Red Hat, Inc. Red Hat Enterprise Linux≤ 10fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 12fstec_bduRU
Сообщество свободного программного обеспечения Debian GNU/Linux≤ 13fstec_bduRU
Сообщество свободного программного обеспечения Linux≤ 7.3 rc7fstec_bduRU
Сообщество свободного программного обеспечения Linux2.6.27 → 5.10.272fstec_bduRU
Сообщество свободного программного обеспечения Linux5.15.0 → 5.15.223fstec_bduRU
Сообщество свободного программного обеспечения Linux6.1.0 → 6.1.190fstec_bduRU
Сообщество свободного программного обеспечения Linux6.12.0 → 6.12.113fstec_bduRU
Сообщество свободного программного обеспечения Linux6.18.0 → 6.18.57fstec_bduRU

showing 20 of 22

advisories (4)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2026-4008Linux Kernel: Mehrere SchwachstellenDeutsch2026-10-15csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Linux Kernel ausnutzen, um einen Denial of Service Angriff durchzuführen oder Root-Rechte zu erlangen.
CERTFR-2026-AVI-1373Multiples vulnérabilités dans les produits Red HatFrançais2026-10-23vendor · certfrFR
CERTFR-2026-AVI-1374Multiples vulnérabilités dans le noyau Linux de DebianFrançais2026-10-23vendor · certfrFR
CERTFR-2026-AVI-1375Multiples vulnérabilités dans le noyau Linux de Debian LTSFrançais2026-10-23vendor · certfrFR

also known as (1)

Other names and identifiers for this entity.

BDU:2026-16755 fstec_bdu

sources

Which sources assert this record, and when.

fstec_bdu cert_bund certfr NVD CVE.org MITRE

published 2026-10-15modified 2026-10-19

references (11) nvd

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan