CVE-2026-63994 tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()

🗓️ 19 Jul 2026 14:56:13Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Tunnels: fix caching of ip and ipv6 headers before skb_cow in icmp builds; initialize after cow and remove header resets.

Reporter	Title	Published	Views	Family All 10
CVE	CVE-2026-63994	19 Jul 202614:56	–	cve
Cvelist	CVE-2026-63994 tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()	19 Jul 202614:56	–	cvelist
Debian CVE	CVE-2026-63994	19 Jul 202614:56	–	debiancve
EUVD	EUVD-2026-45567	19 Jul 202614:56	–	euvd
NVD	CVE-2026-63994	19 Jul 202616:17	–	nvd
OSV	DEBIAN-CVE-2026-63994	19 Jul 202616:17	–	osv
OSV	UBUNTU-CVE-2026-63994	20 Jul 202600:00	–	osv
Positive Technologies	PT-2026-61311	19 Jul 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-63994	21 Jul 202614:48	–	redhatcve
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-63994	20 Jul 202600:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/50750d86a2e5266aba0c295483b3397843198b11
git	www.git.kernel.org/stable/c/6dff77899b9e9fe5d854abda3a98ad04e7229ef7
git	www.git.kernel.org/stable/c/7254aef4d1a7e18e887af9010e2f2dc34806789b
git	www.git.kernel.org/stable/c/76cd9398a0470257ab765bdf5f358a2af2e17934
git	www.git.kernel.org/stable/c/95b6d772bfe788331d9742d73eaa12e113b2adc4
git	www.git.kernel.org/stable/c/b4bc94353050b1fa7b702bd4c6600710dd926cff
git	www.git.kernel.org/stable/c/bf8b3f34c37c162357138e7c0942723b8b94fed1
git	www.git.kernel.org/stable/c/f3f204541f280a6ecb04503a0d6794d93990ca43
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63994.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-63994

21 Jul 2026 03:47Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.19.8

EPSS0.00176