VDB
RHSA-2026:87091
RHSA-2026:87091
PUBLISHED
CVSS 8.800000190734863 HIGH
A flaw was found in the Linux kernel. A local attacker or untrusted guest virtual machine can exploit this vulnerability by transmitting network packets containing malformed checksum metadata into the IPv4 networking subsystem. This failure to validate checksum metadata can corrupt memory during packet handling, potentially leading to arbitrary code execution on the host, a system crash resulting in Denial of Service (DoS), or information disclosure of sensitive memory.
Risk Scores
CVSS 3.1
8.800000190734863
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | perf-debuginfo-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-modules-extra-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-debuginfo-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-debug-modules-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | bpftool-debuginfo-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-abi-stablelists-0:4.18.0-305.215.1.el8_4.noarch as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | python3-perf-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-debuginfo-common-x86_64-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-tools-debuginfo-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-devel-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-debug-modules-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-debug-core-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-0:4.18.0-305.215.1.el8_4.src as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-modules-extra-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-debuginfo-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-tools-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-debug-debuginfo-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-tools-libs-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS EXTENSION (v.8.4) | 4.18.0-305.215.1.el8 |
| Red Hat | kernel-debuginfo-common-x86_64-0:4.18.0-305.215.1.el8_4.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.4) | 4.18.0-305.215.1.el8 |
…and 30 more
Timeline
- Oct 21, 2026 CVE Published
- Oct 22, 2026 CVE Updated
- Oct 22, 2026 Distribution Patch
- Oct 22, 2026 Distribution Patch
- Oct 22, 2026 Security Advisory
- Oct 22, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:87091 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2553429 issue
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_87091.json advisory
- https://access.redhat.com/security/cve/CVE-2026-99999 advisory
- https://www.cve.org/CVERecord?id=CVE-2026-99999 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-99999 advisory
- https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-99999.mbox advisory