CVE
DEBIAN-CVE-2026-63922
In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs.
In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh after handling HAO option ip6parsetlv() caches skbnetworkheader(skb) in nh while walking IPv6 TLVs. ipv6desthao() may call pskbexpandhead() for a cloned skb, which can move the skb head and invalidate the cached network header pointer. Refresh nh after ipv6desthao() returns so any trailing padding or TLVs are parsed from the current skb head. This matches the existing pattern used in ip6parsetlv() after helpers that can modify skb header storage.
Package Versions Affected
Package Version
patch Availability
No items found.
Automatically patch vulnerabilities without upgrading
Fix Without Upgrading
Detect compatible fix
Apply safe remediation
Fix with a single pull request
CVSS Version
Severity
Base Score
CVSS Version
Score Vector
C
H
U
-
C
H
U
0
-
3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
C
H
U
-
Related Resources
No items found.
References
https://security-tracker.debian.org/tracker/CVE-2026-63922