7.8

CVE-2026-63870

ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()

In the Linux kernel, the following vulnerability has been resolved:

ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit()

The aoe driver (or similar) generates a non-IPv6 packet
(e.g., ETH_P_AOE) and queues it for transmission via dev_queue_xmit()
on a 6LoWPAN interface (configured by the user or test case).

Since the packet is not IPv6, the 6LoWPAN header_ops->create function
(lowpan_header_create or header_create) returns early without initializing
the lowpan_addr_info structure in the skb headroom.

In the transmit function (lowpan_xmit), the driver calls lowpan_header
(or setup_header) which unconditionally copies and uses the lowpan_addr_info
from the headroom, which contains uninitialized data.

Fix this by dropping non IPv6 packets.

A similar fix is needed in net/bluetooth/6lowpan.c bt_xmit().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 4dc315e267fe4a3c863fec21f26aa0a418c3f07a
Version < af07fffbd53ddc3ec3c2a4ca914f27899fa89bca
Status affected
Version 4dc315e267fe4a3c863fec21f26aa0a418c3f07a
Version < 3150e6d3223dfc356308125cabf9c34169842d2a
Status affected
Version 4dc315e267fe4a3c863fec21f26aa0a418c3f07a
Version < 8da95cb6ad7d656c871e776a9c7b77e894d6d89c
Status affected
Version 4dc315e267fe4a3c863fec21f26aa0a418c3f07a
Version < 1a827b95e62b4cbe851ae7cc9c961cdfa769cca4
Status affected
Version 4dc315e267fe4a3c863fec21f26aa0a418c3f07a
Version < c1819c8defa235c7beda859bc185b1c429a55ecd
Status affected
Version 4dc315e267fe4a3c863fec21f26aa0a418c3f07a
Version < 285b0842f2e01c3edf805f1fd64da11d9b7f6b4c
Status affected
Version 4dc315e267fe4a3c863fec21f26aa0a418c3f07a
Version < 87172cc8dc49aaf54407a31edffb0232f8cb93ab
Status affected
Version 4dc315e267fe4a3c863fec21f26aa0a418c3f07a
Version < 3a5f3f7aff18bcc36a57839cf50cf0cc8de707f3
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.0
Status affected
Version 0
Version < 4.0
Status unaffected
Version <= 5.10.*
Version 5.10.259
Status unaffected
Version <= 5.15.*
Version 5.15.210
Status unaffected
Version <= 6.1.*
Version 6.1.176
Status unaffected
Version <= 6.6.*
Version 6.6.143
Status unaffected
Version <= 6.12.*
Version 6.12.94
Status unaffected
Version <= 6.18.*
Version 6.18.36
Status unaffected
Version <= 7.0.*
Version 7.0.13
Status unaffected
Version <= *
Version 7.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.025
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/af07fffbd53ddc3ec3c2a4ca914f27899fa89bca
https://git.kernel.org/stable/c/3150e6d3223dfc356308125cabf9c34169842d2a
https://git.kernel.org/stable/c/8da95cb6ad7d656c871e776a9c7b77e894d6d89c
https://git.kernel.org/stable/c/1a827b95e62b4cbe851ae7cc9c961cdfa769cca4
https://git.kernel.org/stable/c/c1819c8defa235c7beda859bc185b1c429a55ecd
https://git.kernel.org/stable/c/285b0842f2e01c3edf805f1fd64da11d9b7f6b4c
https://git.kernel.org/stable/c/87172cc8dc49aaf54407a31edffb0232f8cb93ab
https://git.kernel.org/stable/c/3a5f3f7aff18bcc36a57839cf50cf0cc8de707f3