SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63924

CRITICAL · CVSS 9.8 EPSS 0.69%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A critical vulnerability in the Linux kernel affects the IPv6 handling, specifically within the `ipv6_hop_jumbo()` function, which improperly manages socket buffer pointers during packet processing. This flaw could allow an attacker to exploit the kernel's memory management, potentially leading to system crashes or arbitrary code execution. Organizations using Linux-based systems, particularly those relying on IPv6, should prioritize patching this vulnerability to mitigate the associated risks.

CVE
CVE-2026-63924
Severity
CRITICAL
CVSS
9.8
EPSS
0.69%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers. Let's recompute nh pointer to make sure any change won't mess things up.