CVE-2026-43057

In the Linux kernel, the following vulnerability has been resolved: net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback NETIF_F_IPV6_CSUM only advertises support for checksum offload of packets without IPv6 extension headers. Packets with extension headers must fall back onto software checksumming. Since TSO depends on checksum offload, those must revert to GSO. The below commit introduces that fallback. It always checks network header length. For tunneled packets, the inner header length must be checked instead. Extend the check accordingly. A special case is tunneled packets without inner IP protocol. Such as RFC 6951 SCTP in UDP. Those are not standard IPv6 followed by transport header either, so also must revert to the software GSO path.

• https://git.kernel.org/stable/c/2094a7cf91b71367b649f991aacc7b579f793d0bPatch
• https://git.kernel.org/stable/c/33670f780e0120c3dacda188c512bbffe0b6044cPatch
• https://git.kernel.org/stable/c/732fdeb2987c94b439d51f5cb9addddc2fc48c42Patch
• https://git.kernel.org/stable/c/a98b78116a27e2a57b696b569b2cb431c95cf9b6Patch
• https://git.kernel.org/stable/c/c4336a07eb6b2526dc2b62928b5104b41a7f81f5Patch
• https://git.kernel.org/stable/c/ed71cf465c75f5688b07a35d373cd1d6b589c8eaPatch
• https://cert-portal.siemens.com/productcert/html/ssa-019113.html
• https://cert-portal.siemens.com/productcert/html/ssa-082556.html

Published

May 1, 2026

Last Modified

Jul 14, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-43051In the Linux kernel, the following vulnerability has been re…8.1
• CVE-2026-43052In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2026-43053In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2026-43054In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43055In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-43056In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-43058In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43059In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-4306The WP Job Portal plugin for WordPress is vulnerable to SQL …7.5
• CVE-2026-43060In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-43061In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-43062In the Linux kernel, the following vulnerability has been re…7.1