CVE-2026-63924CWE-416CWE-822

CVE-2026-63924

Critical · published July 19, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()

ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers.

Let's recompute nh pointer to make sure any change won't mess things up.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00714 · 53.1th percentile
Weaknesses
CWE-416 · Use After Free; CWE-822 · Untrusted Pointer Dereference
Published
2026-07-19T20:17Z
Affected products (17)
ProductVersionsFixed in
linux/linux_kernel≥ 2.6.12.1, < 5.10.2595.10.259
linux/linux_kernel≥ 5.11, < 5.15.2105.15.210
linux/linux_kernel≥ 5.16, < 6.1.1766.1.176
linux/linux_kernel≥ 6.2, < 6.6.1436.6.143
linux/linux_kernel≥ 6.7, < 6.12.936.12.93
linux/linux_kernel≥ 6.13, < 6.18.356.18.35
linux/linux_kernel≥ 6.19, < 7.0.127.0.12
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (8)
https://git.kernel.org/stable/c/2b56bbd928c030894c270cd33d60286326919458 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/645b99b1a185c91a79bdac4c5de0f91b212d64f0 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/72af7beae774e46ed543f3f2f267bf0a141bfcdd · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9e883eaa878f4337b5873c706efb5a192364ed18 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b3ac54e5c905f86d22b502eacb5686a282c5659f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bddaa4dfc7f36e1ee343a0622f69288af2b9ace9 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c512e1c819dfbf6ae95ee7a44b65b9ad98979157 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d47548a36639095939f4747d4c43f2271366f565 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 19 JUL 14:55Z
    ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
    cvelistv5