PT-2026-85722

In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments left AH6 rearranges routing-header addresses before computing or verifying the ICV. ipv6 rearrange rthdr assumes that segments left is not larger than the number of addresses described ...

The vulnerability of the functions ah6_output_done() and ah6_output() in the Linux kernel’s net/ipv6/ah6.c file allows a attacker to cause a service failure.

The vulnerability of the functions ah6outputdone and ah6output in the Linux kernel’s net/ipv6/ah6.c file is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to cause a service failure...