NetSight
IP …
critical9.8

CVE-2026-53006

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull() is proble…

Impact

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull() is problematic since skb->head can change. Remove these temporary variables: - We only access &ipv6_hdr(skb)->saddr and &ipv6_hdr(skb)->daddr when net_dbg_ratelimited() is called in the slow path. - Avoid potential future misuse after pskb_pull() call.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 4.4 before 5.10.258
from 5.11 before 5.15.209
from 5.16 before 6.1.175
from 6.2 before 6.6.141
from 6.7 before 6.12.91
from 6.13 before 6.18.33
RedhatEnterprise Linux
Versions 8.0, 9.0, 10.0

Weakness classification

CWE-416CWE-825

References