CVE-2026-99999
Qualys 위협 인텔 · 심각도 5/5 · QID 964581 · Rocky Linux
공개 익스플로잇
측면이동
쉬운 악용
대량 데이터 유출
서비스 거부
권한상승
원격코드실행
In the Linux kernel, the following vulnerability has been resolved:
ipv4: validate checksum_start before completing checksum
If a packet with bad checksum metadata gets into the ipv4 stack,
skb_checksum_help can corrupt the network header and cause a bunch of
mischief.
This was discovered and reported by Paulos, and has been reporoduced
by others independently since.
We really shouldn't allow such packets in, but as a defence
in depth measure, let's also check before we complete the checksum.
A more complete validation at input is forthcoming, but needs more work.
ipv4: validate checksum_start before completing checksum
If a packet with bad checksum metadata gets into the ipv4 stack,
skb_checksum_help can corrupt the network header and cause a bunch of
mischief.
This was discovered and reported by Paulos, and has been reporoduced
by others independently since.
We really shouldn't allow such packets in, but as a defence
in depth measure, let's also check before we complete the checksum.
A more complete validation at input is forthcoming, but needs more work.
타임라인
- NVD 공개
- 첫 보도 The Hacker News · PwnEscape의 치명적인 리눅스 커널 취약점으로 인해 게스트 VM…
- 최근 보도 (총 3건) The Hacker News · ⚡ 주간 요약: 제로데이 취약점 98건, 악성 AI 에이전트, 1억 …
날짜 정보 없는 신호: 공개 PoC 1건
벡터: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
공개 익스플로잇 / PoC
- GitHub 공개 PoC 1건 — 대표 레포 ↗