CVE-2026-63924: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()

Critical severity · published Jul 19, 2026

CVE-2026-63924

ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()

9.8

CVSS

0.7%

EPSS

On KEV

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers. Let's recompute nh pointer to make sure any change won't mess things up.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.7% · higher than 53% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Kernel · Linux

2.6.12.1 before 5.10.259; 5.11 before 5.15.210; 5.16 before 6.1.176; 6.2 before 6.6.143; 6.7 before 6.12.93; 6.13 before 6.18.35; +11 more · source: NVD

Linux · Linux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before b3ac54e5c905f86d22b502eacb5686a282c5659f; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 645b99b1a185c91a79bdac4c5de0f91b212d64f0; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9e883eaa878f4337b5873c706efb5a192364ed18; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before bddaa4dfc7f36e1ee343a0622f69288af2b9ace9; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 72af7beae774e46ed543f3f2f267bf0a141bfcdd; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c512e1c819dfbf6ae95ee7a44b65b9ad98979157; +3 more · source: vendor

Affected product

Kernel

Linux

All Kernel CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-63924

CVE.org

https://www.cve.org/CVERecord?id=CVE-2026-63924

Patch

https://git.kernel.org/stable/c/2b56bbd928c030894c270cd33d60286326919458

Patch