Get a Demo

Let's Patch It!

Book a short call with one our specialists, we'll walk you through how Endor Patches work, and ask you a few questions about your environment (like your primary programming languages and repository management). We'll also send you an email right after you fill out the form, feel free to reply with any questions you have in advance!

CVE

CVE-2026-72351

gue: validate REMCSUM private option length
Back to all
CVE

CVE-2026-72351

gue: validate REMCSUM private option length

In the Linux kernel, the following vulnerability has been resolved:

gue: validate REMCSUM private option length

GUE private flags can indicate that remote checksum offload metadata is

present. The private flags field itself is accounted for by

guehdrflagslen(), but guehdrprivflags_len() currently returns 0 even

when GUEPFLAGREMCSUM is set.

This lets a packet with only the private flags field pass

validategueflags(), after which gueremcsum() and guegro_remcsum()

read the missing REMCSUM start/offset fields from the following bytes.

Account for GUEPLENREMCSUM when GUEPFLAGREMCSUM is present so that

malformed packets are rejected during option validation.

Package Versions Affected

Package Version
patch Availability
No items found.

Automatically patch vulnerabilities without upgrading

Fix Without Upgrading
Detect compatible fix
Apply safe remediation
Fix with a single pull request

CVSS Version

Severity
Base Score
CVSS Version
Score Vector
C
H
U
9.8
-
3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
C
H
U
0
-
3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
C
H
U
-

Related Resources

No items found.

References

https://git.kernel.org/stable/c/158b9995d3c87f3b93f5c22df54a12e12a3438b3, https://git.kernel.org/stable/c/2a99224c120823987e4d829726f4ecb33e03fc1e, https://git.kernel.org/stable/c/2c4de9988e9ddc760b750d6b6e701c35ff60ad14, https://git.kernel.org/stable/c/4a4a1d41c6e901e773bcf795f562a47fa71f692a, https://git.kernel.org/stable/c/61e78679c7c9ca685bff58e4b6348304dc60aafd, https://git.kernel.org/stable/c/7c6876ec1b227261b51803f784c7be1b2242a1a0, https://git.kernel.org/stable/c/d335dcc6f521571d57117b8deeebc940836e5450, https://git.kernel.org/stable/c/f618cbe9b24cd0202004d2db781d5f80ab77037f, https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/72xxx/CVE-2026-72351.json, https://nvd.nist.gov/vuln/detail/CVE-2026-72351, https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Severity

9.8

CVSS Score
0
10

Basic Information

Base CVSS
9.8
EPSS Probability
0.00745%
EPSS Percentile
0.52115%
Introduced Version
c1aa8347e73e4092411fbd96cc59531fb7e76d04,3.19.0,5.11.0,5.16.0,6.2.0,6.7.0,6.13.0,6.19.0,0
Fix Available
d335dcc6f521571d57117b8deeebc940836e5450,5.10.261,5.15.212,6.1.178,6.6.145,6.12.97,6.18.40,7.1.5,6.1.180-1,5.10.262-1,6.12.100-1,0:5.15.213-150.251.amzn2,0:1.0-0.amzn2

Fix Critical Vulnerabilities Instantly

Secure your app without upgrading.
Fix Without Upgrading