Critical 9.8Published Jul 19, 2026

CVE-2026-63924ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()

Updated under an hour ago (2026-10-19 10:10 UTC)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers. Let's recompute nh pointer to make sure any change won't mess things up.

CVSS: 9.8 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Awaiting Analysis
Record last updated: Oct 16, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before b3ac54e5c905f86d22b502eacb5686a282c5659f; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 645b99b1a185c91a79bdac4c5de0f91b212d64f0; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9e883eaa878f4337b5873c706efb5a192364ed18; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before bddaa4dfc7f36e1ee343a0622f69288af2b9ace9; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 72af7beae774e46ed543f3f2f267bf0a141bfcdd; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c512e1c819dfbf6ae95ee7a44b65b9ad98979157; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 2b56bbd928c030894c270cd33d60286326919458; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before d47548a36639095939f4747d4c43f2271366f565	CNA record

References

https://git.kernel.org/stable/c/b3ac54e5c905f86d22b502eacb5686a282c5659f
https://git.kernel.org/stable/c/645b99b1a185c91a79bdac4c5de0f91b212d64f0
https://git.kernel.org/stable/c/9e883eaa878f4337b5873c706efb5a192364ed18
https://git.kernel.org/stable/c/bddaa4dfc7f36e1ee343a0622f69288af2b9ace9
https://git.kernel.org/stable/c/72af7beae774e46ed543f3f2f267bf0a141bfcdd
https://git.kernel.org/stable/c/c512e1c819dfbf6ae95ee7a44b65b9ad98979157
https://git.kernel.org/stable/c/2b56bbd928c030894c270cd33d60286326919458
https://git.kernel.org/stable/c/d47548a36639095939f4747d4c43f2271366f565

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.