In the Linux kernel, the following vulnerability has been resolved:
ipv6: exthdrs: refresh nh after handling HAO option
ip6_parse_tlv() caches skb_network_header(skb) in nh while walking IPv6 TLVs.
ipv6_dest_hao() may call pskb_expand_head() for a cloned skb, which can move the skb head and invalidate the cached network header pointer. Refresh nh after ipv6_dest_hao() returns so any trailing padding or TLVs are parsed from the current skb head.
This matches the existing pattern used in ip6_parse_tlv() after helpers that can modify skb header storage.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.210-148.245Upgrade bpftoolUpgrade kernel-develUpgrade python-perfUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade python-perf-debuginfoUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.259-258.1043 | Aug 2, 2026 | Aug 2, 2026 |
| Amazon_linux_2023 | — | Upgrade perf6.12-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel6.12-headersUpgrade kernel6.12-develUpgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-tools-develUpgrade python3-perf6.12-debuginfoUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade kernel6.18Upgrade kernel6.18-headersUpgrade kernel-livepatch-6.18.35-68.127Upgrade perfUpgrade kernel6.12-tools-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel-livepatch-6.1.176-220.358Upgrade kernel-toolsUpgrade kernel6.18-develUpgrade kernel-develUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.18-toolsUpgrade kernel6.18-modules-extraUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12-debuginfoUpgrade kernel-modules-extraUpgrade bpftool6.12Upgrade perf6.18Upgrade microvm-kernel6.18Upgrade perf-debuginfoUpgrade kernel6.12Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-modules-extraUpgrade kernel-tools-debuginfoUpgrade bpftool6.12-debuginfoUpgrade python3-perfUpgrade bpftool6.18-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel-livepatch-6.12.94-123.174Upgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool6.18Upgrade python3-perf6.12Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernelUpgrade perf6.12Upgrade kernel6.12-tools-develUpgrade python3-perf6.18Upgrade kernel-headers | Aug 10, 2026 | Jul 19, 2026 |
| Debian | — | Upgrade linux | Jul 20, 2026 | Jul 20, 2026 |
| Redhat_linux | — | No solution exists | Jul 23, 2026 | Jul 19, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1008-oracle-64kUpgrade linux-image-nvidia-bos-64kUpgrade linux-image-oracle-64kUpgrade linux-image-7.0.0-1009-awsUpgrade linux-image-ibmUpgrade linux-image-7.0.0-1011-gcpUpgrade linux-image-nvidia-64k-7.0Upgrade linux-image-7.0.0-1016-nvidia-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1035-nvidia-tegraUpgrade linux-image-azureUpgrade linux-image-nvidia-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-gcpUpgrade linux-image-oracle-7.0Upgrade linux-image-7.0.0-1015-raspi-realtimeUpgrade linux-image-raspi-7.0Upgrade linux-image-7.0.0-1008-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-awsUpgrade linux-image-7.0.0-1011-gcp-64kUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-7.0.0-2016-nvidia-bosUpgrade linux-image-azure-7.0Upgrade linux-image-nvidia-bos-64k-7.0Upgrade linux-image-7.0.0-1009-azure-fdeUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-1015-raspiUpgrade linux-image-7.0.0-1010-azureUpgrade linux-image-azure-fde-7.0Upgrade linux-image-7.0.0-1016-nvidiaUpgrade linux-image-7.0.0-1014-azureUpgrade linux-image-raspi-realtime-7.0Upgrade linux-image-ibm-7.0Upgrade linux-image-nvidia-64k-hwe-26.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1035-nvidia-tegra-rtUpgrade linux-image-oracleUpgrade linux-image-7.0.0-2016-nvidia-bos-64kUpgrade linux-image-7.0.0-1009-aws-64kUpgrade linux-image-aws-7.0Upgrade linux-image-nvidia-bosUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-1010-ibmUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-hwe-26.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-bos-7.0Upgrade linux-image-gcp-7.0 | Jul 21, 2026 | Jul 20, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 27, 2026 | Jul 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub