https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 04:50:42 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89562 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ip6_gre: fix hardware header length for NBMA tunnels</p> <p>ip6gre_tnl_link_config_route() accumulates the lower device&#39;s hardware header length into dev-&gt;hard_header_len whenever header_ops is set. This is incorrect for both users of header_ops.</p> <p>ip6gretap and ip6erspan have a fixed Ethernet hardware header length. For an NBMA ip6gre tunnel, ip6gre_header() creates only the GRE header, the optional FOU or GUE header, and the outer IPv6 header. The lower device header is headroom needed later, not part of the tunnel device&#39;s hardware header.</p> <p>Keep the lower device header in needed_headroom. Set hard_header_len to the tunnel header length only for ARPHRD_IP6GRE devices with header_ops, and leave the fixed Ethernet header length unchanged for tap and erspan devices.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ip6_gre: fix hardware header length for NBMA tunnels</p> <p>ip6gre_tnl_link_config_route() accumulates the lower device&#39;s hardware header length into dev-&gt;hard_header_len whenever header_ops is set. This is incorrect for both users of header_ops.</p> <p>ip6gretap and ip6erspan have a fixed Ethernet hardware header length. For an NBMA ip6gre tunnel, ip6gre_header() creates only the GRE header, the optional FOU or GUE header, and the outer IPv6 header. The lower device header is headroom needed later, not part of the tunnel device&#39;s hardware header.</p> <p>Keep the lower device header in needed_headroom. Set hard_header_len to the tunnel header length only for ARPHRD_IP6GRE devices with header_ops, and leave the fixed Ethernet header length unchanged for tap and erspan devices.</p> https://vulnerability.circl.lu/vuln/cve-2026-89562