In the Linux kernel, the following vulnerability has been resolved:
net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback
NETIF_F_IPV6_CSUM only advertises support for checksum offload of packets without IPv6 extension headers. Packets with extension headers must fall back onto software checksumming. Since TSO depends on checksum offload, those must revert to GSO.
The below commit introduces that fallback. It always checks network header length. For tunneled packets, the inner header length must be checked instead. Extend the check accordingly.
A special case is tunneled packets without inner IP protocol. Such as RFC 6951 SCTP in UDP. Those are not standard IPv6 followed by transport header either, so also must revert to the software GSO path.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 3, 2026 | May 3, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 1, 2026 |
| Ubuntu | — | Upgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-generic-6.8Upgrade linux-image-genericUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-xilinxUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-generic-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-aws-6.8Upgrade linux-image-azureUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-gke-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-gke-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-realtime-6.8.1Upgrade linux-image-laptop-23.10Upgrade linux-image-ibm-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-20.04cUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1061-awsUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-fipsUpgrade linux-image-azure-fde-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-awsUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64k | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 1, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub