https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 11:29:11 +0000 https://vulnerability.circl.lu/vuln/cve-2026-63994 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()</p> <p>Sashiko found that iptunnel_pmtud_build_icmp() and iptunnel_pmtud_build_icmpv6() were caching ip_hdr() and ipv6_hdr() before an skb_cow() call which can reallocate skb-&gt;head.</p> <p>Fix this possible UAF by initializing the local variables after the skb_cow() call.</p> <p>Remove skb_reset_network_header() calls which were not needed.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()</p> <p>Sashiko found that iptunnel_pmtud_build_icmp() and iptunnel_pmtud_build_icmpv6() were caching ip_hdr() and ipv6_hdr() before an skb_cow() call which can reallocate skb-&gt;head.</p> <p>Fix this possible UAF by initializing the local variables after the skb_cow() call.</p> <p>Remove skb_reset_network_header() calls which were not needed.</p> https://vulnerability.circl.lu/vuln/cve-2026-63994