CVE-2026-99999

CVE-2026-99999 PwnEscape — Linux Kernel IPv4 csumstart Validation Bug PoC Linux kernel IPv4 header corruption via malformed virtio-net checksum metadata. CVSS 9.3 CRITICAL | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Discovered by Paulos | CNA: kernel.org | Published: 2026-10-15 ⚠️ This is an...

CVE-2026-99999-analysis

CVE-2026-99999 — Technical Analysis & Attack Chain Study ⚠️ This is the educational/analysis repository. It demonstrates the CVE-2026-99999 attack chain locally no network, no root, no real exploit. 🔴 Host-side PoC + harness: → CVE-2026-99999-exploit end-to-end guest→host trigger is not verified...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-146837)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146837 advisory. In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata ge...

TencentOS Server 3: kernel (TSSA-2026:1225)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1225 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 4: kernel (TSSA-2026:1226)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1226 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

TencentOS Server 2: kernel (TSSA-2026:1223)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1223 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

Alibaba Cloud Linux 3 : 0320: kernel (ALINUX3-SA-2026:0320)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0320 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-99999: In the Linux kernel, the following...

Alibaba Cloud Linux 3 : 0319: cloud-kernel bugfix, enhancement and (ALINUX3-SA-2026:0319)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0319 advisory. Package updates are available for Alibaba Cloud Linux 3 Pro that fix the following vulnerabilities: CVE-2026-99999: In the Linux kernel, the...

Astra Linux – vulnerability in linux-6.1, linux-6.12

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix hdrlen overflow in ipv6rplsrhdecompress ipv6rplsrhdecompress computes: outhdr-hdrlen = n + 1 sizeofstruct in6addr 3; hdrlen is an u8 type. For n = 127, the result exceeds 255 and is silently truncated. When n=127...

Astra Linux – vulnerability in linux-6.12

In the Linux kernel, the following vulnerability has been resolved: net/sched: actmirred: fix wrong device for macheaderxmit check in tcfblockcastredir In tcfblockcastredir, when iterating block ports to redirect packets to multiple devices, the macheaderxmit flag is queried from the wrong device...

VulnCheck KEV: CVE-2026-99999

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

SUSE CVE-2026-99999

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

AZL-108243 CVE-2026-99999 affecting package kernel for versions less than 6.6.159.1-1

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

CVE-2026-99999

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

DEBIAN-CVE-2026-99999

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

UBUNTU-CVE-2026-99999

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

CVE-2026-99999

The Linux kernel contains a vulnerability in the IPv4 stack where the skb_checksum_help() function fails to validate the csum_start metadata before completing a checksum. This allows a packet with malformed metadata to cause the kernel to perform an out-of-bounds memory write , potentially corrup...

CVE-2026-99999 ipv4: validate checksum_start before completing checksum

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

CVE-2026-99999 ipv4: validate checksum_start before completing checksum

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...

EUVD-2026-102044

In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksumstart before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skbchecksumhelp can corrupt the network header and cause a bunch of mischief. This was discovered and report...