CVE-2026-63922

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-63922
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63922.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-63922
Downstream
Published
2026-07-19T14:55:24.268Z
Modified
2026-07-21T03:47:40.377869585Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
ipv6: exthdrs: refresh nh after handling HAO option
Details

In the Linux kernel, the following vulnerability has been resolved:

ipv6: exthdrs: refresh nh after handling HAO option

ip6parsetlv() caches skbnetworkheader(skb) in nh while walking IPv6 TLVs.

ipv6desthao() may call pskbexpandhead() for a cloned skb, which can move the skb head and invalidate the cached network header pointer. Refresh nh after ipv6desthao() returns so any trailing padding or TLVs are parsed from the current skb head.

This matches the existing pattern used in ip6parsetlv() after helpers that can modify skb header storage.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63922.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a831f5bbc89a9978795504be9e1ff412043f8f77
Fixed
f8aabed3ff3e986920cf02a2a2785e08e586b234
Fixed
1a11eb7431e3d2882f5bd5939c5a9bbc65ccf4d1
Fixed
12d957979e4a800167842f1b42be6a606d227ebe
Fixed
ff375ed1cba81392346c5bfbf0bb7a13b2946f99
Fixed
751db1b802a067b7fff25880f4e9f9152a171538
Fixed
9b6dcc0a39fd71752937f0b6b3973e1416085dcf
Fixed
f7b52afe3592eae66e160586b45a3f2242972c63

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63922.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.19
Fixed
5.15.210
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.176
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.143
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.93
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.35
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.12

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63922.json"