In the Linux kernel, the following vulnerability has been resolved:
ipv4: validate checksum_start before completing checksum
If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of mischief.
This was discovered and reported by Paulos, and has been reporoduced by others independently since.
We really shouldn't allow such packets in, but as a defence in depth measure, let's also check before we complete the checksum.
A more complete validation at input is forthcoming, but needs more work.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade perfUpgrade kernel-toolsUpgrade microvm-kernel6.18Upgrade kernel-tools-develUpgrade kernel6.18-debuginfoUpgrade python3-perfUpgrade kernel6.18-modules-extraUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel6.18-tools-develUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-develUpgrade kernel6.18-headersUpgrade kernel-modules-extra-commonUpgrade kernel6.18-toolsUpgrade bpftool6.18-debuginfoUpgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-debuginfo-common-aarch64Upgrade python3-perf6.18-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel6.18-tools-debuginfoUpgrade kernel-headersUpgrade kernel6.18Upgrade perf6.18-debuginfoUpgrade perf6.18Upgrade kernel-livepatch-6.18.54-121.166Upgrade python3-perf6.18Upgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftool6.18Upgrade kernel-livepatch-6.1.188-233.385Upgrade kernel-tools-debuginfo | Oct 19, 2026 | Oct 15, 2026 |
| Debian | — | Upgrade linux | Oct 19, 2026 | Oct 15, 2026 |
| Redhat_linux | — | No solution exists | Oct 19, 2026 | Oct 15, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub