CVE-2026-63924
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk49th percentile - higher than 49% of all known CVEs
Summary
In the Linux kernel, a vulnerability was found in IPv6 extension header handling. The ipv6_hop_jumbo() function can alter skb pointers, requiring the nh pointer to be recomputed to prevent errors.
Risk Assessment
The risk involves potential data corruption or incorrect IPv6 stack behavior, which could lead to system crashes or compromised packet processing integrity.
Recommendation
It is recommended to immediately update the Linux kernel to a version containing the fix that ensures the nh pointer is recomputed after calling ipv6_hop_jumbo().
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers. Let's recompute nh pointer to make sure any change won't mess things up.