9.8

CVE-2026-63922

ipv6: exthdrs: refresh nh after handling HAO option

In the Linux kernel, the following vulnerability has been resolved:

ipv6: exthdrs: refresh nh after handling HAO option

ip6_parse_tlv() caches skb_network_header(skb) in nh while walking
IPv6 TLVs.

ipv6_dest_hao() may call pskb_expand_head() for a cloned skb, which can
move the skb head and invalidate the cached network header pointer.
Refresh nh after ipv6_dest_hao() returns so any trailing padding or TLVs
are parsed from the current skb head.

This matches the existing pattern used in ip6_parse_tlv() after helpers
that can modify skb header storage.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version a831f5bbc89a9978795504be9e1ff412043f8f77
Version < b3ac54e5c905f86d22b502eacb5686a282c5659f
Status affected
Version a831f5bbc89a9978795504be9e1ff412043f8f77
Version < f8aabed3ff3e986920cf02a2a2785e08e586b234
Status affected
Version a831f5bbc89a9978795504be9e1ff412043f8f77
Version < 1a11eb7431e3d2882f5bd5939c5a9bbc65ccf4d1
Status affected
Version a831f5bbc89a9978795504be9e1ff412043f8f77
Version < 12d957979e4a800167842f1b42be6a606d227ebe
Status affected
Version a831f5bbc89a9978795504be9e1ff412043f8f77
Version < ff375ed1cba81392346c5bfbf0bb7a13b2946f99
Status affected
Version a831f5bbc89a9978795504be9e1ff412043f8f77
Version < 751db1b802a067b7fff25880f4e9f9152a171538
Status affected
Version a831f5bbc89a9978795504be9e1ff412043f8f77
Version < 9b6dcc0a39fd71752937f0b6b3973e1416085dcf
Status affected
Version a831f5bbc89a9978795504be9e1ff412043f8f77
Version < f7b52afe3592eae66e160586b45a3f2242972c63
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.19
Status affected
Version 0
Version < 2.6.19
Status unaffected
Version <= 5.10.*
Version 5.10.259
Status unaffected
Version <= 5.15.*
Version 5.15.210
Status unaffected
Version <= 6.1.*
Version 6.1.176
Status unaffected
Version <= 6.6.*
Version 6.6.143
Status unaffected
Version <= 6.12.*
Version 6.12.93
Status unaffected
Version <= 6.18.*
Version 6.18.35
Status unaffected
Version <= 7.0.*
Version 7.0.12
Status unaffected
Version <= *
Version 7.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.7% 0.493
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/f8aabed3ff3e986920cf02a2a2785e08e586b234
https://git.kernel.org/stable/c/1a11eb7431e3d2882f5bd5939c5a9bbc65ccf4d1
https://git.kernel.org/stable/c/12d957979e4a800167842f1b42be6a606d227ebe
https://git.kernel.org/stable/c/ff375ed1cba81392346c5bfbf0bb7a13b2946f99
https://git.kernel.org/stable/c/751db1b802a067b7fff25880f4e9f9152a171538
https://git.kernel.org/stable/c/9b6dcc0a39fd71752937f0b6b3973e1416085dcf
https://git.kernel.org/stable/c/f7b52afe3592eae66e160586b45a3f2242972c63
https://git.kernel.org/stable/c/b3ac54e5c905f86d22b502eacb5686a282c5659f