FOSSWire
kernel-os

Linux kernel releases seven stable versions with critical CVE-2026-99999 fix

Brief written by the FOSSWire AI editor from Linux Weekly News (LWN.net)

1 min read Impact: 8/10

Key Takeaway

New stable Linux kernel releases address a critical vulnerability in skb_checksum_help() that allows network header corruption.

Summary

Greg Kroah-Hartman has released seven stable Linux kernel updates, including versions 7.2.11, 6.18.57, 6.12.113, 6.6.159, 6.1.190, 5.15.223, and 5.10.272. These updates contain a fix for CVE-2026-99999, a critical flaw in the skb_checksum_help() function. The vulnerability involves IPv4 packets with incorrect checksum metadata causing network header corruption.

Details of CVE-2026-99999

  • The vulnerability resides in the skb_checksum_help() function.
  • It is triggered by IPv4 packets containing invalid checksum metadata.
  • The flaw can lead to network header corruption.
  • Discussion suggests the issue may involve metadata provided over connections like virtio, potentially affecting both transmit (TX) and receive (RX) paths.

Why it matters

Users running any of the affected kernel series are advised to upgrade immediately to mitigate the risk of network header corruption and potential host-level exploitation.

Original reference: lwn.net →