CVE-2026-63992 tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()

🗓️ 19 Jul 2026 14:56:12Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Fix tunnel discovery: avoid transport header; read the ICMP header from the network header after confirming presence.

Reporter	Title	Published	Views	Family All 12
CVE	CVE-2026-63992	19 Jul 202614:56	–	cve
Cvelist	CVE-2026-63992 tunnels: do not assume transport header in iptunnel_pmtud_check_icmp()	19 Jul 202614:56	–	cvelist
Debian CVE	CVE-2026-63992	19 Jul 202614:56	–	debiancve
EUVD	EUVD-2026-45565	19 Jul 202614:56	–	euvd
NVD	CVE-2026-63992	19 Jul 202616:17	–	nvd
OSV	BELL-CVE-2026-63992	22 Jul 202606:04	–	osv
OSV	DEBIAN-CVE-2026-63992	19 Jul 202616:17	–	osv
OSV	UBUNTU-CVE-2026-63992	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61309	19 Jul 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-63992	21 Jul 202616:41	–	redhatcve

Source	Link
git	www.git.kernel.org/stable/c/43368636c663cff6e59dde93cf4b8e43ac28eb93
git	www.git.kernel.org/stable/c/509323077ef79a26ba0c60bb556e45c12c398b2d
git	www.git.kernel.org/stable/c/5a92cb45e34749865d03daf8d3500f77b5f6644c
git	www.git.kernel.org/stable/c/7f4f7efe7f30edd29c4988de01728bf2398217e4
git	www.git.kernel.org/stable/c/a096b6e34f602950af9a2b0856cd93a5f4c276d7
git	www.git.kernel.org/stable/c/c7b7ec3e69e673c0d6b57f74d21da50c485c598e
git	www.git.kernel.org/stable/c/cb549df9ce4ee15c9d5b19ddab12cf2128e4313c
git	www.git.kernel.org/stable/c/e917d0c69f01af2bb4fbea2b66d560a53b3ac7ec
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63992.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-63992

22 Jul 2026 05:29Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.19.1

EPSS0.00521