CVE-2026-64554

The CVE-2026-64554 entry concerns a Linux kernel netfilter bridge issue: br_ip6_fragment() stores prevhdr, a pointer into skb head, from ip6_find_1stfragopt(), and after skb_checksum_help() reallocates the head via pskb_expand_head(), prevhdr becomes a dangling pointer. ip6_frag_next() dereferenc...