7.8

CVE-2026-68121

Medienbericht

pppoe: reload header pointer after dev_hard_header()

In the Linux kernel, the following vulnerability has been resolved:

pppoe: reload header pointer after dev_hard_header()

pppoe_sendmsg() saves a pointer to the PPPoE header before calling
dev_hard_header(). Device header callbacks are allowed to reallocate the
skb head, invalidating pointers into it.

This can happen when a send is blocked in copy_from_user() while the first
non-Ethernet port is added to an empty team device. The team's delegated
GRE header callback then expands the skb head. PPPoE subsequently writes
six bytes through the stale pointer into the freed head.

Reload the PPPoE header through the skb's network-header offset after
device header creation. pskb_expand_head() updates that offset when it
relocates the head.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 7a56e7c9b08e08fd55a1bcada24cf4fe3782b722
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 6eed5ae7887a93160803d2b81ff88e75eefd4a4c
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < ba3409369c5413cdf0dcbf3a928f76b48e8c3e6a
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < e6493a4d1ee17595766165fa446d45b7e0c318d0
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 7e9fbd7f96bcde63a7c798fe16b38cedee7a1501
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 6866abf59976d273164a6624234d96a967280223
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < bed4caecd723693f750e13adbb2c42ca1249a3fd
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < e9c238f6fe42fb1b4dba3a578277de32cb487937
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.12
Status affected
Version 0
Version < 2.6.12
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.148
Status unaffected
Version <= 6.12.*
Version 6.12.101
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.14% 0.036
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
21.09.2026 16:52
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
19.09.2026 09:20
Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
18.09.2026 22:50
https://git.kernel.org/stable/c/e6493a4d1ee17595766165fa446d45b7e0c318d0
https://git.kernel.org/stable/c/7e9fbd7f96bcde63a7c798fe16b38cedee7a1501
https://git.kernel.org/stable/c/6866abf59976d273164a6624234d96a967280223
https://git.kernel.org/stable/c/bed4caecd723693f750e13adbb2c42ca1249a3fd
https://git.kernel.org/stable/c/e9c238f6fe42fb1b4dba3a578277de32cb487937
https://git.kernel.org/stable/c/6eed5ae7887a93160803d2b81ff88e75eefd4a4c
https://git.kernel.org/stable/c/7a56e7c9b08e08fd55a1bcada24cf4fe3782b722
https://git.kernel.org/stable/c/ba3409369c5413cdf0dcbf3a928f76b48e8c3e6a