CVE-2026-43057 Details
Description
In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback NETIF_F_IPV6_CSUM only advertises support for checksum offload of packets without IPv6 extension headers. Packets with extension headers must fall back onto software checksumming. Since TSO depends on checksum offload, those must revert to GSO. The below commit introduces that fallback. It always checks network header length. For tunneled packets, the inner header length must be checked instead. Extend the check accordingly. A special case is tunneled packets without inner IP protocol. Such as RFC 6951 SCTP in UDP. Those are not standard IPv6 followed by transport header either, so also must revert to the software GSO path.
A vulnerability in the Linux kernel's handling of tunneled traffic can lead to improper checksum offloading for IPv6 packets with extension headers. This issue affects the Linux kernel stable tree. The vulnerability arises because the NETIF_F_IPV6_CSUM feature only supports checksum offloading for packets without extension headers. When extension headers are present, packets must revert to software checksumming. However, this fallback is not correctly applied to tunneled packets, particularly those without an inner IP protocol, such as RFC 6951 SCTP in UDP, which do not conform to standard IPv6 header expectations.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://cert-portal.siemens.com/productcert/html/ssa-019113.html | siemens-SADP | |
| https://cert-portal.siemens.com/productcert/html/ssa-082556.html | siemens-SADP | |
| https://git.kernel.org/stable/c/2094a7cf91b71367b649f991aacc7b579f793d0b | kernel.org | Patch |
| https://git.kernel.org/stable/c/33670f780e0120c3dacda188c512bbffe0b6044c | kernel.org | Patch |
| https://git.kernel.org/stable/c/732fdeb2987c94b439d51f5cb9addddc2fc48c42 | kernel.org | Patch |
| https://git.kernel.org/stable/c/a98b78116a27e2a57b696b569b2cb431c95cf9b6 | kernel.org | Patch |
| https://git.kernel.org/stable/c/c4336a07eb6b2526dc2b62928b5104b41a7f81f5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ed71cf465c75f5688b07a35d373cd1d6b589c8ea | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.1.149, < 6.1.168 >= 6.6.103, < 6.6.134 >= 6.12.44, < 6.12.81 >= 6.16.4, < 6.17 > 6.17.1, < 6.18.22 >= 6.19, < 6.19.12 6.17 - 6.17 rc3 6.17 rc4 6.17 rc5 6.17 rc6 6.17 rc7 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 14, 2026 | CVE Modified | siemens-SADP |
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 6, 2026 | Initial Analysis | [email protected] |
| May 3, 2026 | CVE Modified | kernel.org |
| May 1, 2026 | New CVE Received | kernel.org |