Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

CVE-2026-53006: Linux Kernel IPv6 Handling Bug Fixed

CVE-2026-53006 CVE-2026-53006
Summary

A bug in the Linux kernel's IPv6 handling has been fixed, which could potentially allow attackers to access memory they shouldn't. This bug has been resolved, but it's essential to keep your Linux system up to date with the latest security patches to prevent similar issues in the future.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software
VendorProductAffected versions
linux linux_kernel >= 4.4, < 5.10.258
>= 5.11, < 5.15.209
>= 5.16, < 6.1.175
>= 6.2, < 6.6.141
>= 6.7, < 6.12.91
>= 6.13, < 6.18.33
>= 6.19, < 7.0.10
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
redhat enterprise_linux 8.0
9.0
10.0
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
linux linux < 7bff2c8fe5c35ae58bf73104f53db3676e6e5d94
4.4
Original title
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull() is problematic since skb->head can change. R...
Original description
In the Linux kernel, the following vulnerability has been resolved:

ipv6: fix possible UAF in icmpv6_rcv()

Caching saddr and daddr before pskb_pull() is problematic
since skb->head can change.

Remove these temporary variables:

- We only access &ipv6_hdr(skb)->saddr and &ipv6_hdr(skb)->daddr
when net_dbg_ratelimited() is called in the slow path.

- Avoid potential future misuse after pskb_pull() call.
nvd CVSS3.1 9.8
Vulnerability type
CWE-825
CWE-416 Use After Free
Published: 24 Jun 2026 · Updated: 23 Jul 2026 · First seen: 28 Jun 2026