CVE-2026-53228

Vulnerability summary (CVE-2026-53228) : In the Linux kernel, SIT over IPv6 tunneling relies on a cached inner IPv6 header pointer during GSO offloads. When skb_header_unclone() moves the skb head via pskb_expand_head(), the code may read from a freed head unless the inner IPv6 header pointer is ...

EUVD-2026-39319

In the Linux kernel, the following vulnerability has been resolved: ipv6: sit: reload inner IPv6 header after GSO offloads ipip6tunnelxmit caches the inner IPv6 header pointer at function entry and continues using it after iptunnelhandleoffloads. For GSO skbs, iptunnelhandleoffloads calls...