395 matches found
SUSE CVE-2026-98570
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: keep room for the mac header in dstdevoverhead The seg6, ioam6 and rpl lwtunnels size their skbcowhead request as the length they are about to push plus dstdevoverhead, then push the new headers and rebuild the mac...
AZL-109086 CVE-2026-98570 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: keep room for the mac header in dstdevoverhead The seg6, ioam6 and rpl lwtunnels size their skbcowhead request as the length they are about to push plus dstdevoverhead, then push the new headers and rebuild the mac...
CVE-2026-98570
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: keep room for the mac header in dstdevoverhead The seg6, ioam6 and rpl lwtunnels size their skbcowhead request as the length they are about to push plus dstdevoverhead, then push the new headers and rebuild the mac...
CVE-2026-98570 net: ipv6: keep room for the mac header in dst_dev_overhead()
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: keep room for the mac header in dstdevoverhead The seg6, ioam6 and rpl lwtunnels size their skbcowhead request as the length they are about to push plus dstdevoverhead, then push the new headers and rebuild the mac...
CVE-2026-98570
The Linux kernel contains a vulnerability in the ipv6 networking stack related to how dst_dev_overhead() handles headroom. When seg6 , ioam6 , and rpl lwtunnels request skb_cow_head() space, they may not account for sufficient headroom required by skb_mac_header_rebuild(). Specifically, when proc...
PT-2026-116789
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: keep room for the mac header in dst dev overhead The seg6, ioam6 and rpl lwtunnels size their skb cow head request as the length they are about to push plus dst dev overhead, then push the new headers and rebuild the m...
CVE-2026-98570: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: ipv6: keep room for the mac header in dstdevoverhead The seg6, ioam6 and rpl lwtunnels size their skbcowhead request as the length they are about to push plus dstdevoverhead, then push the new headers and rebuild the mac...
kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks RPL segment routing header SRH decompression function, ipv6rplsrhdecompress. An integer overflow occurs when processing a specially crafted IPv6 packet, causing the header length calculation to truncate...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: Fixed an issue where the hdrlen value overflows during the ipv6rplsrhdecompress function. The ipv6rplsrhdecompress function calculates: c outhdr-hdrlen = n + 1 sizeofstruct in6addr 3; hdrlen is a type u8. When n is...
kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks RPL segment routing header SRH decompression function, ipv6rplsrhdecompress. An integer overflow occurs when processing a specially crafted IPv6 packet, causing the header length calculation to truncate...
kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks RPL segment routing header SRH decompression function, ipv6rplsrhdecompress. An integer overflow occurs when processing a specially crafted IPv6 packet, causing the header length calculation to truncate...
kernel: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks RPL segment routing header SRH decompression function, ipv6rplsrhdecompress. An integer overflow occurs when processing a specially crafted IPv6 packet, causing the header length calculation to truncate...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: rpl: Fixed a use-after-free in rpldosrhInline. Running lwtdstcacherefloop.sh in selftest with KASAN triggers results in the following error: 0 root@fedora net ./lwtdstcacherefloop.sh … TEST: rpl input 57.631529...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Added a NULL check for the lookupatid function. The lookupatid function may return NULL if the ATID is invalid or does not exist in the identifier table. This could lead to dereferencing a null pointer without any...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
A flaw was discovered in the networking subsystem of the Linux kernel, particularly in the handling of the RPL protocol. This issue arises due to the improper handling of user-provided data, which can lead to an assertion failure. This could allow an unauthenticated remote attacker to create a...
SUSE CVE-2026-89561
In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6rplsrhrcv ipv6rplsrhrcv dereferences idev from in6devget without a NULL check when reading idev-cnf.rplsegenabled. When the device's MTU drops below IPV6MINMTU, addrconfifdown clears...
Linux Distros Unpatched Vulnerability : CVE-2026-89561
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: rpl: fix NULL dereference of idev in ipv6rplsrhrcv ipv6rplsrhrcv dereferences idev from in6devget without a NULL check when reading idev-cnf.rplsegenabled...
CVE-2026-89561
A flaw was found in the Linux kernel's IPv6 Routing Protocol for Low-Power and Lossy Networks RPL implementation. A remote attacker could send specially crafted IPv6 packets to a vulnerable system while manipulating the network interface's Maximum Transmission Unit MTU, which defines the largest...
DEBIAN-CVE-2026-89561
In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6rplsrhrcv ipv6rplsrhrcv dereferences idev from in6devget without a NULL check when reading idev-cnf.rplsegenabled. When the device's MTU drops below IPV6MINMTU, addrconfifdown clears...
AZL-100190 CVE-2026-89561 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6rplsrhrcv ipv6rplsrhrcv dereferences idev from in6devget without a NULL check when reading idev-cnf.rplsegenabled. When the device's MTU drops below IPV6MINMTU, addrconfifdown clears...