Description
In the Linux kernel, the following vulnerability has been resolved:
ipv4: validate checksum_start before completing checksum
If a packet with bad checksum metadata gets into the ipv4 stack,
skb_checksum_help can corrupt the network header and cause a bunch of
mischief.
This was discovered and reported by Paulos, and has been reporoduced
by others independently since.
We really shouldn't allow such packets in, but as a defence
in depth measure, let's also check before we complete the checksum.
A more complete validation at input is forthcoming, but needs more work.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 2.6.27 | 5.10.272 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 7.2.11-1 | — |
| Debian 13 | linux | 6.12.113-1 | — |
| Debian 12 | linux | 6.1.190-1 | — |
| Debian 12 | linux-6.12 | 6.12.113-1~deb12u1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Nvidia-BlueField 24.04 LTS | linux-bluefield | 6.8.0-1036.41 | — |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | 5.15.0-1104.106 | — |
| Ubuntu 26.10 | linux | 7.3.0-10.10 | — |
| Ubuntu 26.10 | linux-aws +4 | 7.3.0-1004.4 | — |
| Ubuntu 26.10 | linux-azure-fde | 7.3.0-1004.5 | — |
| Ubuntu 26.10 | linux-riscv +1 | 7.3.0-10.10.1 | — |
| Ubuntu 26.04 LTS | linux | 7.0.0-43.43 | USN-9018-1 |
| Ubuntu 26.04 LTS | linux-aws | 7.0.0-1017.18 | USN-9018-1 |
| Ubuntu 26.04 LTS | linux-azure | 7.0.0-1020.21 | USN-9019-1 |
| Ubuntu 26.04 LTS | linux-azure-fde | 7.0.0-1019.19 | USN-9020-1 |
| Ubuntu 26.04 LTS | linux-gcp | 7.0.0-1017.19 | USN-9018-1 |
| Ubuntu 26.04 LTS | linux-gke | 7.0.0-1010.11 | USN-9020-1 |
| Ubuntu 26.04 LTS | linux-ibm +1 | 7.0.0-1018.18 | USN-9018-1 |
| Ubuntu 26.04 LTS | linux-oracle | 7.0.0-1016.18 | USN-9018-1 |
| Ubuntu 26.04 LTS | linux-raspi | 7.0.0-1023.23 | USN-9021-1 |
| Ubuntu 26.04 LTS | linux-realtime | 7.0.0-43.43.1 | USN-9020-1 |
| Ubuntu 26.04 LTS | linux-riscv +2 | No fix yet | — |
| Ubuntu 24.04 LTS | linux | 6.8.0-149.149 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1069.74 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-aws-7.0 | 7.0.0-1017.18~24.04.1 | USN-9020-1 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1073.82 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-azure-fde | 6.8.0-1071.78 | USN-9039-1 |
| Ubuntu 24.04 LTS | linux-azure-fde-7.0 | 7.0.0-1019.19~24.04.1 | USN-9020-1 |
| Ubuntu 24.04 LTS | linux-gcp | 6.8.0-1073.81 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-gcp-7.0 | 7.0.0-1017.19~24.04.1 | USN-9020-1 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1068.77 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1053.57 | USN-9023-1 |
| Ubuntu 24.04 LTS | linux-hwe-7.0 | 7.0.0-43.43~24.04.1 | USN-9018-2 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1069.70 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-149.149.1 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-nvidia | 6.8.0-1067.70 | USN-9024-1 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1067.70.1 | USN-9040-1 |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | 6.8.0-1039.40 | USN-9091-1 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1067.71 | USN-9022-1 |
| Ubuntu 24.04 LTS | linux-oracle-7.0 | 7.0.0-1016.18~24.04.1 | USN-9020-1 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1068.72 | USN-9025-1 |
| Ubuntu 24.04 LTS | linux-riscv +31 | No fix yet | — |
| Ubuntu 24.04 LTS | linux-riscv-7.0 | 7.0.0-43.43.1~24.04.2 | — |
| Ubuntu 24.04 LTS | linux-vmware | 6.8.0-1010.10 | USN-9022-1 |
Show 19 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | linux | 5.15.0-203.213 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-aws | 5.15.0-1120.127 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1069.74~22.04.1 | USN-9024-1 |
| Ubuntu 22.04 LTS | linux-azure | 5.15.0-1126.135 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1073.82~22.04.1 | USN-9026-1 |
| Ubuntu 22.04 LTS | linux-azure-fde | 5.15.0-1125.134 | — |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | 6.8.0-1071.78~22.04.1 | USN-9026-1 |
| Ubuntu 22.04 LTS | linux-gcp | 5.15.0-1121.131 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | 6.8.0-1073.81~22.04.1 | USN-9024-1 |
| Ubuntu 22.04 LTS | linux-gke | 5.15.0-1116.122 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-gkeop | 5.15.0-1103.111 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-149.149~22.04.1 | USN-9066-1 |
| Ubuntu 22.04 LTS | linux-ibm | 5.15.0-1114.118 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | 6.8.0-1069.70~22.04.1 | USN-9024-1 |
| Ubuntu 22.04 LTS | linux-intel-iotg | 5.15.0-1115.121 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-kvm | 5.15.0-1112.117 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-lowlatency | 5.15.0-198.208 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-149.149.1~22.04.1 | USN-9024-1 |
| Ubuntu 22.04 LTS | linux-nvidia | 5.15.0-1115.116 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | 5.15.0-1071.73 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-oracle | 5.15.0-1117.123 | USN-9027-1 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1067.71~22.04.1 | USN-9025-1 |
| Ubuntu 22.04 LTS | linux-raspi | 5.15.0-1113.116 | USN-9029-1 |
| Ubuntu 22.04 LTS | linux-riscv +35 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | 6.8.0-149.149~22.04.2 | — |
| Ubuntu 20.04 LTS | linux-gke +28 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +14 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2056.58 | USN-9025-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1064.65 | USN-9023-1 |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 +1 | No fix yet | — |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | 5.15.0-1112.116 | USN-9027-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | 5.15.0-1119.128 | USN-9027-1 |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | 6.8.1-1064.65~22.04.1 | USN-9024-1 |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | 6.8.0-1069.74+fips1 | USN-9023-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | 6.8.0-1073.82+fips1 | USN-9022-1 |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | 6.8.0-1073.81+fips1 | USN-9023-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | 5.15.0-1120.127+fips1 | USN-9027-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | 5.15.0-1126.135+fips1 | USN-9027-1 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | 5.15.0-203.213+fips1 | USN-9027-2 |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | 5.15.0-1121.131+fips1 | USN-9027-1 |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro FIPS-updates 16.04 LTS | linux-fips | No fix yet | — |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips +3 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux +10 | No fix yet | — |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | 5.15.0-1120.127~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | 5.15.0-1126.135~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-azure-fde-5.15 | 5.15.0-1125.134~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | 5.15.0-1121.131~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 | 5.15.0-203.213~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 +1 | 5.15.0-1114.118~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | 5.15.0-1115.121~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-lowlatency-hwe-5.15 | 5.15.0-198.208~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | 5.15.0-1071.73~20.04.1 | USN-9027-1 |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | 5.15.0-1117.123~20.04.1 | USN-9027-1 |
| Ubuntu Pro 18.04 LTS | linux +12 | No fix yet | — |
| Ubuntu Pro 16.04 LTS | linux +7 | No fix yet | — |
| Ubuntu Pro 14.04 LTS | linux +3 | No fix yet | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 10 | rv +77 | 6.12.0-211.67.1.el10_2 | RHSA-2026:85321 |
| RHEL 9 | rv +75 | 5.14.0-687.59.1.el9_8 | RHSA-2026:99135, RHSA-2026:86033 |
| RHEL 8 | kernel-rt +12 | 4.18.0-553.178.1.rt7.519.el8_10 | RHSA-2026:89082 |
| RHEL 8 | perf +26 | 4.18.0-553.178.1.el8_10 | RHSA-2026:89083 |
Show 15 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Red Hat Shadow Migration Toolkit 10 | kernel-modules-internal | 6.12.0-211.67.1.el10_2 | RHSA-2026:85321 |
| Red Hat Rhel Extras Rt Els 7 | kernel-rt +7 | 3.10.0-1160.167.2.rt56.1320.el7 | RHSA-2026:95721, RHSA-2026:88204 |
| RHEL 10.0 EUS | rv +77 | 6.12.0-55.112.1.el10_0 | RHSA-2026:85979 |
| RHEL 9.6 EUS | rv +77 | 5.14.0-570.150.1.el9_6 | RHSA-2026:87264 |
| RHEL 9.4 E4S | bpftool | 7.3.0-427.157.1.el9_4 | RHSA-2026:86089 |
| RHEL 9.4 E4S | rv +62 | 5.14.0-427.157.1.el9_4 | RHSA-2026:86089 |
| RHEL 9.2 E4S | bpftool | 7.0.0-284.199.1.el9_2 | RHSA-2026:87821 |
| RHEL 9.2 E4S | kernel-rt +14 | 5.14.0-284.199.1.rt14.484.el9_2 | RHSA-2026:87822 |
| RHEL 9.2 E4S | perf +47 | 5.14.0-284.199.1.el9_2 | RHSA-2026:87821 |
| RHEL 8.8 TUS | perf +17 | 4.18.0-477.176.1.el8_8 | RHSA-2026:87098 |
| RHEL 8.8 E4S | perf +18 | 4.18.0-477.176.1.el8_8 | RHSA-2026:87098 |
| RHEL 8.6 EUS Long Life | perf +17 | 4.18.0-372.224.1.el8_6 | RHSA-2026:87086 |
| RHEL 8.6 AUS | perf +17 | 4.18.0-372.224.1.el8_6 | RHSA-2026:87086 |
| RHEL 8.4 EUS Long Life | perf +17 | 4.18.0-305.215.1.el8_4 | RHSA-2026:87091 |
| RHEL 8.4 AUS | perf +17 | 4.18.0-305.215.1.el8_4 | RHSA-2026:87091 |
| RHEL 7 ELS | perf +18 | 3.10.0-1160.167.2.el7 | RHSA-2026:88206 |
| RHEL 6 ELS | perf +13 | 2.6.32-754.66.1.el6 | RHSA-2026:90933 |
| Red Hat Enterprise Linux Nvidia 10 | rv +41 | 6.12.0-265.29.el10nv | RHSA-2026:85928 |
AlmaLinux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux 10 | rv +74 | 6.12.0-211.67.1.el10_2 | ALSA-2026:85321 |
| AlmaLinux 9 | rv +73 | 5.14.0-687.59.1.el9_8 | ALSA-2026:86033 |
| AlmaLinux 8 | kernel-rt +9 | 4.18.0-553.178.1.rt7.519.el8_10 | ALSA-2026:89082 |
| AlmaLinux 8 | perf +24 | 4.18.0-553.178.1.el8_10 | ALSA-2026:89083 |
Rocky Linux
Errata ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Rocky Linux 9 | kernel | 5.14.0-687.59.1.el9_8 | RLSA-2026:99135, RLSA-2026:86033 |
| Rocky Linux 9 | rv +74 | 5.14.0-741.22.1.el9_9 | RLSA-2026:99135 |
| Rocky Linux 8 | kernel | 4.18.0-553.178.1.el8_10 | RLSA-2026:89083 |
| Rocky Linux 8 | kernel-rt | 4.18.0-553.178.1.rt7.519.el8_10 | RLSA-2026:89082 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP7 | kernel-64kb +5 | 6.4.0-150700.53.87.3 | SUSE-SU-2026:4935-1 |
| SLES 15 SP7 | kernel-default-base | 6.4.0-150700.53.87.3.150700.17.49.2 | SUSE-SU-2026:4935-1 |
| SLES 15 SP7 | kernel-obs-build | 6.4.0-150700.53.87.2 | SUSE-SU-2026:4935-1 |
| SLES 15 SP7 | kernel-syms | 6.4.0-150700.53.87.1 | SUSE-SU-2026:4935-1 |
| SLES 15 SP6 | kernel-64kb +6 | 6.4.0-150600.23.143.1 | SUSE-SU-2026:4934-1 |
| SLES 15 SP6 | kernel-default-base | 6.4.0-150600.23.143.1.150600.12.66.3 | SUSE-SU-2026:4934-1 |
| SLES 15 SP5 | kernel-64kb +6 | 5.14.21-150500.55.195.1 | SUSE-SU-2026:4936-1 |
| SLES 15 SP5 | kernel-default-base | 5.14.21-150500.55.195.1.150500.6.91.1 | SUSE-SU-2026:4936-1 |
| SLES 15 SP4 | kernel-64kb +6 | 5.14.21-150400.24.246.1 | SUSE-SU-2026:4937-1 |
| SLES 15 SP4 | kernel-default-base | 5.14.21-150400.24.246.1.150400.24.124.1 | SUSE-SU-2026:4937-1 |
| SLES 12 SP5 | kernel-syms +2 | 4.12.14-122.336.1 | SUSE-SU-2026:4892-1 |
Show 20 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 11 SP4 | kernel-ec2 +6 | 3.0.101-108.226.1 | SUSE-SU-2026:4933-1 |
| SLES for SAP 16.0 | kernel-64kb +8 | 6.12.0-160000.40.1 | SUSE-SU-2026:24446-1 |
| SLES for SAP 16.0 | kernel-default-base | 6.12.0-160000.40.1.160000.2.29 | SUSE-SU-2026:24446-1 |
| SLES for SAP 15 SP6 | kernel-default-base | 6.4.0-150600.23.143.1.150600.12.66.3 | SUSE-SU-2026:4934-1 |
| SLES for SAP 15 SP6 | kernel-docs +4 | 6.4.0-150600.23.143.1 | SUSE-SU-2026:4934-1 |
| SLES for SAP 15 SP5 | kernel-default-base | 5.14.21-150500.55.195.1.150500.6.91.1 | SUSE-SU-2026:4936-1 |
| SLES for SAP 15 SP5 | kernel-docs +4 | 5.14.21-150500.55.195.1 | SUSE-SU-2026:4936-1 |
| SLES for SAP 15 SP4 | kernel-default-base | 5.14.21-150400.24.246.1.150400.24.124.1 | SUSE-SU-2026:4937-1 |
| SLES for SAP 15 SP4 | kernel-docs +4 | 5.14.21-150400.24.246.1 | SUSE-SU-2026:4937-1 |
| SLES 16.0 | kernel-64kb +8 | 6.12.0-160000.40.1 | SUSE-SU-2026:24446-1, SUSE-SU-2026:24437-1 |
| SLES 16.0 | kernel-default-base | 6.12.0-160000.40.1.160000.2.29 | SUSE-SU-2026:24446-1 |
| SLE Micro 6.2 | kernel-default-base | 6.12.0-160000.40.1.160000.2.29 | SUSE-SU-2026:24422-1 |
| SLE Micro 6.2 | kernel-rt +5 | 6.12.0-160000.40.1 | SUSE-SU-2026:24422-1, SUSE-SU-2026:24386-1 |
| SLE Micro 6.1 | kernel-default-base | 6.4.0-159998.54.1.159998.21.39 | SUSE-SU-2026:24379-1 |
| SLE Micro 6.1 | kernel-rt +4 | 6.4.0-159998.54.1 | SUSE-SU-2026:24553-1, SUSE-SU-2026:24379-1 |
| SLE Micro 6.0 | kernel-default-base | 6.4.0-159998.54.1.159998.21.40 | SUSE-SU-2026:24371-1 |
| SLE Micro 6.0 | kernel-rt +4 | 6.4.0-159998.54.1 | SUSE-SU-2026:24473-1, SUSE-SU-2026:24371-1 |
| SLE Micro 5.5 | kernel-default-base | 5.14.21-150500.55.195.1.150500.6.91.1 | SUSE-SU-2026:4936-1 |
| SLE Micro 5.5 | kernel-rt +1 | 5.14.21-150500.13.167.2 | SUSE-SU-2026:4938-1 |
| SLE Micro 5.5 | kernel-source +1 | 5.14.21-150500.55.195.1 | SUSE-SU-2026:4936-1 |
| SLE Micro 5.4 | kernel-default-base | 5.14.21-150400.24.246.1.150400.24.124.1 | SUSE-SU-2026:4937-1 |
| SLE Micro 5.4 | kernel-rt +1 | 5.14.21-150400.15.192.2 | SUSE-SU-2026:4939-1 |
| SLE Micro 5.4 | kernel-source +1 | 5.14.21-150400.24.246.1 | SUSE-SU-2026:4937-1 |
| SLE Micro 5.3 | kernel-default-base | 5.14.21-150400.24.246.1.150400.24.124.1 | SUSE-SU-2026:4937-1 |
| SLE Micro 5.3 | kernel-source +1 | 5.14.21-150400.24.246.1 | SUSE-SU-2026:4937-1 |
| SLE Live Patching 15 SP7 | kernel-default | 6.4.0-150700.53.87.3 | SUSE-SU-2026:4935-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7-RT_Update_22 | 1-150700.1.3.1 | SUSE-SU-2026:4940-1 |
| SLE Live Patching 15 SP7 | kernel-livepatch-SLE15-SP7_Update_23 | 1-150700.15.3.2 | SUSE-SU-2026:4935-1 |
| SLE Live Patching 15 SP6 | kernel-default | 6.4.0-150600.23.143.1 | SUSE-SU-2026:4934-1 |
| SLE Live Patching 15 SP6 | kernel-livepatch-SLE15-SP6_Update_33 | 1-150600.13.5.1 | SUSE-SU-2026:4934-1 |
| SLE Live Patching 15 SP5 | kernel-default | 5.14.21-150500.55.195.1 | SUSE-SU-2026:4936-1 |
| SLE Live Patching 15 SP5 | kernel-livepatch-SLE15-SP5_Update_47 | 1-150500.11.3.1 | SUSE-SU-2026:4936-1 |
| SLE Live Patching 15 SP4 | kernel-default | 5.14.21-150400.24.246.1 | SUSE-SU-2026:4937-1 |
| SLE Live Patching 15 SP4 | kernel-livepatch-SLE15-SP4_Update_61 | 1-150400.9.3.1 | SUSE-SU-2026:4937-1 |
| SLE Live Patching 12 SP5 | kernel-default | 4.12.14-122.336.1 | SUSE-SU-2026:4892-1 |
| SLE Live Patching 12 SP5 | kgraft-patch-SLE12-SP5_Update_89 | 1-8.3.1 | SUSE-SU-2026:4892-1 |
| SLE HPC 15 SP5 | kernel-64kb +5 | 5.14.21-150500.55.195.1 | SUSE-SU-2026:4936-1 |
| SLE HPC 15 SP5 | kernel-default-base | 5.14.21-150500.55.195.1.150500.6.91.1 | SUSE-SU-2026:4936-1 |
| SLE HPC 15 SP4 | kernel-64kb +5 | 5.14.21-150400.24.246.1 | SUSE-SU-2026:4937-1 |
| SLE HPC 15 SP4 | kernel-default-base | 5.14.21-150400.24.246.1.150400.24.124.1 | SUSE-SU-2026:4937-1 |
| SUSE Real Time Module 15 SP7 | kernel-rt +2 | 6.4.0-150700.7.81.1 | SUSE-SU-2026:4940-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 16.0 | kernel-default-base | 6.12.0-160000.40.1.160000.2.29 | openSUSE-SU-2026:22167-1 |
| openSUSE Leap 16.0 | kernel-rt +11 | 6.12.0-160000.40.1 | openSUSE-SU-2026:22167-1 |
Amazon Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Amazon Linux 2023 | kernel-livepatch-6.1.188-233.385 +2 | 1:1.0-0.amzn2023 | ALAS2023-2026-3197, ALAS2023-2026-3196, ALAS2023-2026-3192 |
| Amazon Linux 2023 | perf +11 | 1:6.1.188-233.385.amzn2023 | ALAS2023-2026-3197 |
| Amazon Linux 2023 | perf6.12 +11 | 1:6.12.110-135.201.amzn2023 | ALAS2023-2026-3196 |
| Amazon Linux 2023 | perf6.18 +12 | 1:6.18.54-121.166.amzn2023 | ALAS2023-2026-3192 |
| Amazon Linux 2 | kernel-livepatch-4.14.355-287.753 | 1.0-0.amzn2 | ALAS2-2026-3962 |
| Amazon Linux 2 | perf +8 | 4.14.355-287.753.amzn2 | ALAS2-2026-3962 |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 3 | kernel | 6.6.159.1-1 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 9 | kernel-uek +34 | 6.12.0-207.111.5.4.el10uek | ELSA-2026-500572, ELSA-2026-500399 |
| Oracle Linux 9 | rv +28 | 5.14.0-687.59.1.el9_8 | ELSA-2026-86033 |
| Oracle Linux 8 | kernel-uek +17 | 5.15.0-325.221.6.4.el9uek | ELSA-2026-500574, ELSA-2026-500398 |
| Oracle Linux 8 | perf +19 | 4.18.0-553.178.1.el8_10 | ELSA-2026-500574, ELSA-2026-500398, ELSA-2026-89083 |
| Oracle Linux 7 | kernel-uek +6 | 5.4.17-2136.360.3.1.el8uek | ELSA-2026-500573, ELSA-2026-500397 |
| Oracle Linux 7 | kernel-uek-tools | 5.4.17-2136.360.3.1.el7uek | ELSA-2026-500573, ELSA-2026-500397 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
GitHub 14 repositories · most starred shown
-
PeronGH/CVE-2026-99999 ★ 22 · Oct 17, 2026
PoC for CVE-2026-99999 (PwnEscape) on a prepared TAP.
-
01luyicheng/CVE-2026-99999 ★ 5 · Oct 18, 2026
CVE-2026-99999 PwnEscape PoC - Linux kernel IPv4 csum_start validation bug guest-to-host memory leak (CVSS 9.3)
-
Quaerendir/cve-2026-99999-audit ★ 3 · Oct 17, 2026
cve-2026-99999-audit script (PwnEscape)
-
MChorfa/csumguard ★ 3 · Oct 16, 2026
Restricted eBPF TC ingress guard, CO-RE detector, verified loader, and C11 VMM launch supervisor for CVE-2026-99999
-
gandli/CVE-2026-99999-pwnescape ★ 2 · Oct 19, 2026
CVE-2026-99999 (PwnEscape) reproduction: IPv4 csum_start validation bug — IHL rewrite and 32-byte kernel heap disclosure
-
nsrg-fmlorg/kpatch-rocky-cve-2026-99999 ★ 2 · Oct 19, 2026
kpatch livepatch build and load test for CVE-2026-99999 on Rocky Linux 8.10 (4.18.0-553.144.1.el8_10)
-
debuman/cve-2026-99999-scanner ★ 1 · Oct 20, 2026
CVE-2026-99999 checker for Linux
-
shizuku198411/CVE-2026-99999-KVM-checksum-metadata-non-destructive-PoC ★ 0 · Oct 19, 2026
-
kingahmadr/CVE-2026-99999-kernel-check ★ 0 · Oct 18, 2026
-
nsrg-fmlorg/kpatch-alma-cve-2026-99999 ★ 0 · Oct 18, 2026
kpatch livepatch build for CVE-2026-99999 on AlmaLinux 8/9 GA kernels
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 50
- USN-9091-1 linux-nvidia-tegra vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9027-2 linux-fips vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9020-1 linux-aws-7.0, linux-azure-fde, linux-azure-fde-7.0, linux-gcp-7.0, linux-gke, linux-oracle-7.0, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9022-1 linux, linux-aws, linux-azure, linux-azure-fips, linux-gcp, linux-gke, linux-ibm, linux-lowlatency, linux-oracle, linux-vmware vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9025-1 linux-oracle-6.8, linux-raspi, linux-raspi-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9024-1 linux-aws-6.8, linux-gcp-6.8, linux-ibm-6.8, linux-lowlatency-hwe-6.8, linux-nvidia, linux-realtime-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9023-1 linux-aws-fips, linux-gcp-fips, linux-gkeop, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9026-1 linux-azure-6.8, linux-azure-fde-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9021-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9039-1 linux-azure-fde vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9029-1 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9040-1 linux-nvidia-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9066-1 linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- USN-9019-1 linux-azure vulnerabilities Ubuntu Security Notices (USN) · Nov 13, 2026
- RHSA-2026:85321 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:99135 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:95721 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:87822 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:88206 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:87086 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:90933 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:87264 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:89083 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:87098 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:89082 Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:87091 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:87821 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:88204 Red Hat Security Advisory: kernel-rt security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:86089 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:85928 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:86033 Red Hat Security Advisory: kernel security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RHSA-2026:85979 Red Hat Security Advisory: kernel security update Red Hat Security Advisories (RHSA) · Nov 13, 2026
- RLSA-2026:99135 Moderate: kernel security, bug fix, and enhancement update Rocky Linux Security Advisories · Nov 13, 2026
- USN-9018-2 linux-hwe-7.0 vulnerabilities Ubuntu Security Notices (USN) · Nov 12, 2026
- WID-SEC-2026-4008 Linux Kernel: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026
- USN-9018-1 linux, linux-aws, linux-gcp, linux-ibm, linux-oem-7.0, linux-oracle vulnerabilities Ubuntu Security Notices (USN) · Nov 11, 2026
- USN-9027-1 linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-gcp, linux-gcp-5.15, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-realtime vulnerabilities Ubuntu Security Notices (USN) · Nov 11, 2026
- SUSE-SU-2026:24553-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Nov 7, 2026
- ALSA-2026:86033 Important: kernel security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 6, 2026
- ALSA-2026:85321 Important: kernel security, bug fix, and enhancement update AlmaLinux Security Advisories · Nov 6, 2026
- SUSE-SU-2026:24473-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Nov 4, 2026
- ELSA-2026-500573 Important: Unbreakable Enterprise kernel security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Nov 2, 2026
- ELSA-2026-500572 Important: Unbreakable Enterprise kernel security update (Oracle Linux 9) Oracle Linux Security Advisories (ELSA) · Nov 2, 2026
- ELSA-2026-500574 Important: Unbreakable Enterprise kernel security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Nov 2, 2026
- SUSE-SU-2026:24437-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Nov 1, 2026
- SUSE-SU-2026:24446-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Nov 1, 2026
- SUSE-SU-2026:4936-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Oct 31, 2026
- SUSE-SU-2026:4937-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Oct 31, 2026
- SUSE-SU-2026:4938-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Oct 31, 2026
- SUSE-SU-2026:4939-1 Security update for the Linux Kernel SUSE / openSUSE Security Updates · Oct 31, 2026
References
- https://git.kernel.org/stable/c/a464d950f31c89565cbaae038cc60db04fe01956
- https://git.kernel.org/stable/c/0fab003ef4698e0628060a45a48f14b43ba2a40a
- https://git.kernel.org/stable/c/94524b7b32691de2e2ce162c04d6cbc9106e5cbf
- https://git.kernel.org/stable/c/a65f69e0f38ffbed1b128029e09097436416dc8b
- https://git.kernel.org/stable/c/32a8b0adaa18e52aaa0b246b5ffe683075354dbb
- https://git.kernel.org/stable/c/f3e835af6226f1dd12160cbd696081e9b6155de0
- https://git.kernel.org/stable/c/c3e33464746166264334641dc850a36eef7e6326
- https://git.kernel.org/stable/c/6785011f8b16abf40b1e9d8b2e332232b3e68822
- https://pwn.ai/blog/pwnescape
- https://vercel.com/blog/findings-from-the-1-million-dollar-vercel-sandbox-challenge