7.5

CVE-2026-43057

net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback

In the Linux kernel, the following vulnerability has been resolved:

net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback

NETIF_F_IPV6_CSUM only advertises support for checksum offload of
packets without IPv6 extension headers. Packets with extension
headers must fall back onto software checksumming. Since TSO
depends on checksum offload, those must revert to GSO.

The below commit introduces that fallback. It always checks
network header length. For tunneled packets, the inner header length
must be checked instead. Extend the check accordingly.

A special case is tunneled packets without inner IP protocol. Such as
RFC 6951 SCTP in UDP. Those are not standard IPv6 followed by
transport header either, so also must revert to the software GSO path.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 6.1.149 < 6.1.168
Linux ≫ Linux Kernel Version >= 6.6.103 < 6.6.134
Linux ≫ Linux Kernel Version >= 6.12.44 < 6.12.81
Linux ≫ Linux Kernel Version >= 6.16.4 < 6.17
Linux ≫ Linux Kernel Version > 6.17.1 < 6.18.22
Linux ≫ Linux Kernel Version >= 6.19 < 6.19.12
Linux ≫ Linux Kernel Version 6.17 Update -
Linux ≫ Linux Kernel Version 6.17 Update rc3
Linux ≫ Linux Kernel Version 6.17 Update rc4
Linux ≫ Linux Kernel Version 6.17 Update rc5
Linux ≫ Linux Kernel Version 6.17 Update rc6
Linux ≫ Linux Kernel Version 6.17 Update rc7
Linux ≫ Linux Kernel Version 7.0 Update rc1
Linux ≫ Linux Kernel Version 7.0 Update rc2
Linux ≫ Linux Kernel Version 7.0 Update rc3
Linux ≫ Linux Kernel Version 7.0 Update rc4
Linux ≫ Linux Kernel Version 7.0 Update rc5
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.39% 0.311
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/2094a7cf91b71367b649f991aacc7b579f793d0b
Patch
https://git.kernel.org/stable/c/ed71cf465c75f5688b07a35d373cd1d6b589c8ea
Patch
https://git.kernel.org/stable/c/33670f780e0120c3dacda188c512bbffe0b6044c
Patch
https://git.kernel.org/stable/c/a98b78116a27e2a57b696b569b2cb431c95cf9b6
Patch
https://git.kernel.org/stable/c/732fdeb2987c94b439d51f5cb9addddc2fc48c42
Patch
https://git.kernel.org/stable/c/c4336a07eb6b2526dc2b62928b5104b41a7f81f5
Patch
https://cert-portal.siemens.com/productcert/html/ssa-082556.html
https://cert-portal.siemens.com/productcert/html/ssa-019113.html