CVE-2026-63912 xfrm: esp: restore combined single-frag length gate

🗓️ 19 Jul 2026 14:55:17Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Restore combined-length page gate for IPv four and IPv six ESP to reject page frag when length exceeds page.

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2026-63912	19 Jul 202614:55	–	cve
Cvelist	CVE-2026-63912 xfrm: esp: restore combined single-frag length gate	19 Jul 202614:55	–	cvelist
EUVD	EUVD-2026-45685	19 Jul 202614:55	–	euvd
NVD	CVE-2026-63912	19 Jul 202616:17	–	nvd
OSV	DEBIAN-CVE-2026-63912	19 Jul 202616:17	–	osv
OSV	UBUNTU-CVE-2026-63912	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61229	19 Jul 202600:00	–	ptsecurity

Source	Link
git	www.git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
git	www.git.kernel.org/stable/c/322e48187e0245ab2fff6fec2220b0cae677dbec
git	www.git.kernel.org/stable/c/36519e3d941fc99d3b52c134dbaf311f987a4708
git	www.git.kernel.org/stable/c/566295735530ee513326049b0540f32ec050bf2e
git	www.git.kernel.org/stable/c/5d7ab86e2b6bc23054616bf6ac562013bf60af8c
git	www.git.kernel.org/stable/c/65f3b3fc2347b89fe21db1e92c7681368415f095
git	www.git.kernel.org/stable/c/b84091ceddc9f133229dceab3ccc930bf27f9cba
git	www.git.kernel.org/stable/c/c093468aea8277f77272a4f199b2e15e19cabb59
git	www.git.kernel.org/stable/c/dfa0d7b0ff1eb6b2c416b8fdb9b4f2cefba57a40
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63912.json

20 Jul 2026 03:47Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.19.8

EPSS0.0021