CVE-2026-89563

CVE-2026-89563 affects the Linux kernel IPv6 tunnel subsystem (ip6_tunnel). The root cause is in ip6_tnl_xmit(), which used skb_realloc_headroom() to expand headroom before pushing outer IPv6 and optional encapsulation headers. That call consumed the original socket buffer while keeping the repla...