CVE-2026-63924
published 2026-07-19CVE-2026-63924: In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls…
PriorityP347critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.69%
49.5th percentile
In the Linux kernel, the following vulnerability has been resolved:
ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers.
Let's recompute nh pointer to make sure any change won't mess things up.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux | — | — |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b3ac54e5c905f86d22b502eacb5686a282c5659f | b3ac54e5c905f86d22b502eacb5686a282c5659f |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 645b99b1a185c91a79bdac4c5de0f91b212d64f0 | 645b99b1a185c91a79bdac4c5de0f91b212d64f0 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 9e883eaa878f4337b5873c706efb5a192364ed18 | 9e883eaa878f4337b5873c706efb5a192364ed18 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < bddaa4dfc7f36e1ee343a0622f69288af2b9ace9 | bddaa4dfc7f36e1ee343a0622f69288af2b9ace9 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 72af7beae774e46ed543f3f2f267bf0a141bfcdd | 72af7beae774e46ed543f3f2f267bf0a141bfcdd |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < c512e1c819dfbf6ae95ee7a44b65b9ad98979157 | c512e1c819dfbf6ae95ee7a44b65b9ad98979157 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 2b56bbd928c030894c270cd33d60286326919458 | 2b56bbd928c030894c270cd33d60286326919458 |
| linux | linux | >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < d47548a36639095939f4747d4c43f2271366f565 | d47548a36639095939f4747d4c43f2271366f565 |
| linux | linux_kernel | — | — |
| ubuntu | linux-aws | — | — |
| ubuntu | linux-azure | — | — |
| ubuntu | linux-azure-fde | — | — |
| ubuntu | linux-ibm | — | — |
| ubuntu | linux-oracle | — | — |
| ubuntu | linux-raspi | — | — |
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
vendor_redhat9.8CRITICAL
vendor_ubuntu7.0HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers.
ghsa_unreviewed·2026-07-19
CVE-2026-63924 [CRITICAL] In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers.
In the Linux kernel, the following vulnerability has been resolved:
ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers.
Let's recompute nh pointer to make sure any change won't mess things up.
VulDB
Linux Kernel up to 7.0.11 Exthdrs ipv6_hop_jumbo Remote Code Execution
vuldb·2026-07-19
CVE-2026-63924 Linux Kernel up to 7.0.11 Exthdrs ipv6_hop_jumbo Remote Code Execution
A vulnerability marked as very critical has been reported in Linux Kernel up to 7.0.11. Affected by this issue is the function ipv6_hop_jumbo of the component Exthdrs. The manipulation leads to Remote Code Execution.
This vulnerability is uniquely identified as CVE-2026-63924. The attack is possible to be carried out remotely. No exploit exists.
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2026-07-28·CVSS 7.0
CVE-2026-64231 [HIGH] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that some AMD Zen 2 processors did not properly isolate
shared resources in the operation cache. A local attacker could possibly
use this issue to corrupt instructions executed at a higher privilege
level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 platform drivers;
- Cryptographic API;
- PSP security protocol;
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 archit
Ubuntu
Linux kernel (Azure) vulnerabilities
vendor_ubuntu·2026-07-24·CVSS 2.0
CVE-2026-64107 [LOW] Linux kernel (Azure) vulnerabilities
Title: Linux kernel (Azure) vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that some AMD processors did not properly clear data in
the floating point divider unit during speculative execution. A local
attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate
shared resources in the operation cache. A local attacker could possibly
use this issue to corrupt instructions executed at a higher privilege
level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 platfor
Ubuntu
Linux kernel vulnerabilities
vendor_ubuntu·2026-07-23·CVSS 7.0
CVE-2026-64107 [HIGH] Linux kernel vulnerabilities
Title: Linux kernel vulnerabilities
Summary: Several security issues were fixed in the Linux kernel.
It was discovered that some AMD Zen 2 processors did not properly isolate
shared resources in the operation cache. A local attacker could possibly
use this issue to corrupt instructions executed at a higher privilege
level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 platform drivers;
- PSP security protocol;
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer
Red Hat
kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
vendor_redhat·2026-07-19·CVSS 9.8
CVE-2026-63924 [CRITICAL] CWE-825 kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
kernel: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
A flaw was found in the Linux kernel's handling of IPv6 extended headers. Specifically, the `ipv6_hop_jumbo()` function, which processes jumbo payloads, can modify internal packet buffer (skb) pointers. However, the network header (nh) pointer is not recomputed after these modifications. This oversight could lead to incorrect data processing, potentially causing system instability or a denial of service (DoS) due to malformed packets.
Package: kernel (Red Hat Enterprise Linux 10) - Affected
Package: kernel (Red Hat Enterprise Linux 6) - Under investigation
Package: kernel (Red Hat Enterprise Linux 7) - Affected
Package: kernel-rt (Red Hat Enterprise Linux 7) - Affected
Package: kernel (Red Hat Enterprise Linux 8) - Affe
No detection rules found.
No public exploits indexed.
https://git.kernel.org/stable/c/2b56bbd928c030894c270cd33d60286326919458https://git.kernel.org/stable/c/645b99b1a185c91a79bdac4c5de0f91b212d64f0https://git.kernel.org/stable/c/72af7beae774e46ed543f3f2f267bf0a141bfcddhttps://git.kernel.org/stable/c/9e883eaa878f4337b5873c706efb5a192364ed18https://git.kernel.org/stable/c/b3ac54e5c905f86d22b502eacb5686a282c5659fhttps://git.kernel.org/stable/c/bddaa4dfc7f36e1ee343a0622f69288af2b9ace9https://git.kernel.org/stable/c/c512e1c819dfbf6ae95ee7a44b65b9ad98979157https://git.kernel.org/stable/c/d47548a36639095939f4747d4c43f2271366f565
2026-07-19
Published