ubuntu.com Linux Kernel Vulnerability CVE-2026-99999 Exploited
Article Content
Browse articles 
- •CVE-2026-99999 allows memory corruption in Linux kernel due to malformed packets.
- •The vulnerability affects all kernel versions prior to specific fixes and has a CVSS score of 9.3.
- •A proof-of-concept exploit is publicly available, highlighting the need for immediate patching.
A vulnerability (CVE-2026-99999) in the Linux kernel allows for memory corruption via malformed checksum metadata in IPv4 packets. Discovered by Paulos, this flaw can lead to out-of-bounds memory reads, potentially leaking 32-64 bytes of kernel heap memory per datagram. All Linux kernel versions prior to specific fixes are affected, with the vulnerability rated 9.3 on the CVSS scale. A proof-of-concept exploit is available, emphasizing the urgency for patching. Users are advised to update to unaffected versions: 5.10.272+, 5.15.223+, 6.1.190+, 6.12.113+, 6.18.57+, and 7.2.11+. The vulnerability was reported on October 18, 2026, and the fix was introduced in commit f43798c.
Ask AI about this cluster
Answers cite the sources they use
Updated just now How this analysis works
Timeline
2026-10-18
CVE-2026-99999 disclosed
A critical vulnerability in the Linux kernel was reported, allowing memory corruption from malformed IPv4 packets.
Sploitus2026-10-19
Fix introduced
A fix for CVE-2026-99999 was introduced in kernel commit f43798c, addressing the vulnerability.
ubuntu.comMore articles in this cluster (2)
Common questions
Which Linux kernel versions are affected?
All versions prior to 5.10.272, 5.15.223, 6.1.190, 6.12.113, 6.18.57, and 7.2.11 are affected.
What is the CVSS score for this vulnerability?
CVE-2026-99999 has a CVSS score of 9.3, indicating a critical severity.
How can I mitigate this vulnerability?
Update to the latest kernel versions that are not affected by this vulnerability.
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to… 
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…