Skip to content
Heist/ feed
High

net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback

Type: advisorySource: Official CVE List1 source record

In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback NETIF_F_IPV6_CSUM only advertises support for checksum offload of packets without IPv6 extension headers. Packets with extension headers must fall back onto software checksumming. Since TSO depends on checksum offload, those must revert to GSO. The below commit introduces that fallback. It always checks network header length. For tunneled packets, the inner header length must be checked instead. Extend the check accordingly. A special case is tunneled packets without inner IP protocol. Such as RFC 6951 SCTP in UDP. Those are not standard IPv6 followed by transport header either, so also must revert to the software GSO path.

Announced Source revision 1
Original source ↗

CVE-2026-43057

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: cve:CVE-2026-43057

Linux

Source reference: /containers/cna/affected/0/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Linux

Source reference: /containers/cna/affected/1/product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "a0478d7e888028f85fa7785ea838ce0ca09398e2",
        "lessThan": "2094a7cf91b71367b649f991aacc7b579f793d0b",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "2156d9e9f2e483c8c3906c0ea57ea312c1424235",
        "lessThan": "ed71cf465c75f5688b07a35d373cd1d6b589c8ea",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "041e2f945f82fdbd6fff577b79c33469430297aa",
        "lessThan": "33670f780e0120c3dacda188c512bbffe0b6044c",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "864e3396976ef41de6cc7bc366276bf4e084fff2",
        "lessThan": "a98b78116a27e2a57b696b569b2cb431c95cf9b6",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "864e3396976ef41de6cc7bc366276bf4e084fff2",
        "lessThan": "732fdeb2987c94b439d51f5cb9addddc2fc48c42",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "864e3396976ef41de6cc7bc366276bf4e084fff2",
        "lessThan": "c4336a07eb6b2526dc2b62928b5104b41a7f81f5",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "794ddbb7b63b6828c75967b9bcd43b086716e7a1",
        "versionType": "git"
      },
      {
        "status": "affected",
        "version": "6.1.149",
        "lessThan": "6.1.168",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.6.103",
        "lessThan": "6.6.134",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.12.44",
        "lessThan": "6.12.81",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "6.16.4",
        "lessThan": "6.17",
        "versionType": "semver"
      }
    ],
    "programFiles": [
      "net/core/dev.c"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "vendor": "Linux",
    "product": "Linux",
    "versions": [
      {
        "status": "affected",
        "version": "6.17"
      },
      {
        "status": "unaffected",
        "version": "0",
        "lessThan": "6.17",
        "versionType": "semver"
      },
      {
        "status": "unaffected",
        "version": "6.1.168",
        "versionType": "semver",
        "lessThanOrEqual": "6.1.*"
      },
      {
        "status": "unaffected",
        "version": "6.6.134",
        "versionType": "semver",
        "lessThanOrEqual": "6.6.*"
      },
      {
        "status": "unaffected",
        "version": "6.12.81",
        "versionType": "semver",
        "lessThanOrEqual": "6.12.*"
      },
      {
        "status": "unaffected",
        "version": "6.18.22",
        "versionType": "semver",
        "lessThanOrEqual": "6.18.*"
      },
      {
        "status": "unaffected",
        "version": "6.19.12",
        "versionType": "semver",
        "lessThanOrEqual": "6.19.*"
      },
      {
        "status": "unaffected",
        "version": "7.0",
        "versionType": "original_commit_for_fix",
        "lessThanOrEqual": "*"
      }
    ],
    "programFiles": [
      "net/core/dev.c"
    ],
    "defaultStatus": "affected"
  }
]
Related CVEs
CVE-2026-43057

Source reference: /cveMetadata/cveId

Publisher severity

high

Source reference: /containers/cna/metrics

Event
#28343 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement