9.8

CVE-2026-72319

ipvs: ensure inner headers in ICMP errors are in headroom

In the Linux kernel, the following vulnerability has been resolved:

ipvs: ensure inner headers in ICMP errors are in headroom

Sashiko points out that after stripping the outer headers
with pskb_pull() we should ensure the inner IP headers
in ICMP errors from tunnels are present in the skb headroom
for functions like ipv4_update_pmtu(), icmp_send() and
IP_VS_DBG().

Also, add more checks for the length of the inner headers.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e
Version < 19657b3a17b774ae4e2f2635b5ae8638c9344a40
Status affected
Version f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e
Version < dac813101914c21219ac221a60a31a11bc90e7ec
Status affected
Version f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e
Version < dd22f74a09e25ca298ced0a3763ef353242cb78d
Status affected
Version f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e
Version < 9bc9b95aee2b2e3f1301a16a67ee504960402875
Status affected
Version f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e
Version < a735f9964a3d9ed97daf9b08507f8b5bcafe6326
Status affected
Version f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e
Version < 8f48cfe657409fb5c7ba0521b14da6d47546d9cf
Status affected
Version f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e
Version < 92185d6f7819bc558939ae83de7b1abe90e3b5c2
Status affected
Version f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e
Version < 3f7a535ff0fa627a0132803e4c2f903ceffcbc1c
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 3.7
Status affected
Version 0
Version < 3.7
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.76% 0.521
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/19657b3a17b774ae4e2f2635b5ae8638c9344a40
https://git.kernel.org/stable/c/dac813101914c21219ac221a60a31a11bc90e7ec
https://git.kernel.org/stable/c/dd22f74a09e25ca298ced0a3763ef353242cb78d
https://git.kernel.org/stable/c/9bc9b95aee2b2e3f1301a16a67ee504960402875
https://git.kernel.org/stable/c/a735f9964a3d9ed97daf9b08507f8b5bcafe6326
https://git.kernel.org/stable/c/8f48cfe657409fb5c7ba0521b14da6d47546d9cf
https://git.kernel.org/stable/c/92185d6f7819bc558939ae83de7b1abe90e3b5c2
https://git.kernel.org/stable/c/3f7a535ff0fa627a0132803e4c2f903ceffcbc1c