CVE-2026-72319

The CVE-2026-72319 entry describes a Linux kernel vulnerability in IPVS where inner IP headers in ICMP errors must be kept within skb headroom after removing outer headers (pskb_pull). The root cause involves ensuring the inner headers remain present for functions such as ipv4_update_pmtu(), icmp...

kernel: ip6_tunnel: clear skb2->cb[] in ip4ip6_err()

A flaw was found in the Linux kernel's IPv6 tunnel implementation. A remote attacker could exploit this flaw by sending malicious ICMPv6 error messages to cause a stack-based buffer overflow in the kernel's IPv4-over-IPv6 tunnel error handling code. This could result in a kernel crash denial of...

CVE-2026-43037: Out-of-bounds Write

In the Linux kernel, the following vulnerability has been resolved: ip6tunnel: clear skb2-cb in ip4ip6err Oskar Kjos reported the following problem. ip4ip6err calls icmpsend on a cloned skb whose cb was written by the IPv6 receive path as struct inet6skbparm. icmpsend passes IPCBskb2 to...

Linux Kernel "icmp_send()"空指针引用远程拒绝服务漏洞

BUGTRAQ ID: 47872 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel "icmpsend"在实现上存在空指针引用远程拒绝服务漏洞，远程攻击者可利用此漏洞造成受影响内核崩溃，拒绝服务合法用户，也可能执行任意代码。 在函数icmpsend net/ipv4/icmp.c中，发送到devnet函数的参数没有正确验证，可导致使内核崩溃的空指针引用。攻击者可利用此bug并造成指定目标或任何连接到本地网络上的2.6.38.x机器的DoS攻击。要造成崩溃，攻击者需要用IPv4碎片报文冲击目标。IP报文中的重要字段： Flags:...

kernel security and bug fix update

2.6.18-128.1.6.0.1.el5 - NET Add entropy support to e1000 and bnx2 John Sobecki,Guru Anbalagane orabug 6045759 - MM shrink zone patch John Sobecki,Chris Mason orabug 6086839 - NET Add xen pv/bonding netconsole support Tina yang orabug 6993043 bz 7258 - nfs convert ENETUNREACH to ENOTCONN Guru...

CVE-2009-0778: Undefined Security Weakness

The icmpsend function in net/ipv4/icmp.c in the Linux kernel before 2.6.25, when configured as a router with a REJECT route, does not properly manage the Protocol Independent Destination Cache aka DST in some situations involving transmission of an ICMP Host Unreachable message, which allows remo...

CVE-2006-0454: Undefined Security Weakness

Linux kernel before 2.6.15.3 down to 2.6.12, while constructing an ICMP response in icmpsend, does not properly handle when the ipoptionsecho function in icmp.c fails, which allows remote attackers to cause a denial of service crash via vectors such as 1 record-route and 2 timestamp IP options wi...