AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-68385

CRITICAL · CVSS 9.8 EPSS 0.50%

Source: NVD + CISA KEV + EPSS · Published 2026-08-10 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's csum_partial() function, which improperly calculates checksums on machines lacking vector facilities, potentially leading to incorrect checksum values derived from address zero. This flaw could compromise data integrity in applications relying on accurate checksum calculations. Organizations using Linux on systems without vector support should prioritize patching to mitigate potential data corruption risks.

CVE
CVE-2026-68385
Severity
CRITICAL
CVSS
9.8
EPSS
0.50%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csum_partial() without vector facility Currently csum_partial() calls csum_copy() with copy=false and dst=NULL. On machines without the vector facility, csum_copy() falls back to cksm(dst, ...), causing the checksum to be calculated from address zero instead of the source buffer. The VX implementation already checksums data loaded from src. Make the fallback do the same by passing src to cksm().