PT-2026-86192

CVE-2026-80901

·

Published

2026-09-04

·

Updated

2026-11-12

Description by

CVSS 4.0
6.3
Medium
MetricsAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)
Description An issue exists in the IPVS (IP Virtual Server) component where checksum validations are missing or incorrect for certain packet types. Specifically, the ip vs in icmp v6() function fails to validate checksums for ICMPv6 packets from clients. Additionally, the handle response icmp() function, used for both IPv4 and IPv6, lacks pseudo-header calculation when validating ICMPv6 messages from real servers, which can lead to issues if the hardware does not perform checksum validation.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
AZL-99662
CLSA-2026-1791132991
USN-8886-1
USN-8959-1
USN-8960-1
USN-9019-1
USN-9020-1
USN-9021-1
USN-9022-1
USN-9023-1
USN-9024-1
USN-9025-1
USN-9026-1
USN-9039-1
USN-9040-1
USN-9066-1
Found an issue in the description? Have something to add? Feel free to write us 👾