Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-63994: Linux kernel tunnel handling may cause crash
CVE-2026-63994 · published 2 months ago
Summary
A coding error in the Linux kernel's tunnel code could lead to a crash when the system processes certain network messages. This problem affects several Canonical Linux kernel packages, including the standard, AWS, and Azure versions. Updating to the latest kernel packages from Canonical resolves the issue.
What to do
- Update canonical linux-hwe-7.0 to version 7.0.0-28.28~24.04.1.
- Update canonical linux-nvidia-7.0 to version 7.0.0-1016.16~24.04.1.
- Update canonical linux-riscv-7.0 to version 7.0.0-28.28.1~24.04.3.
- Update canonical linux to version 7.0.0-28.28.
- Update canonical linux-aws to version 7.0.0-1009.9.
- Update canonical linux-azure to version 7.0.0-1010.10.
- Update canonical linux-azure-fde to version 7.0.0-1009.9.
- Update canonical linux-gcp to version 7.0.0-1008.8.
- Update canonical linux-gke to version 7.0.0-1003.4.
- Update canonical linux-ibm to version 7.0.0-1010.10.
- Update canonical linux-nvidia to version 7.0.0-1016.16.
- Update canonical linux-nvidia-bos to version 7.0.0-2016.16.
- Update canonical linux-oem-7.0 to version 7.0.0-1009.9.
- Update canonical linux-oracle to version 7.0.0-1008.8.
- Update canonical linux-raspi to version 7.0.0-1015.15.
- Update canonical linux-realtime to version 7.0.0-28.28.1.
- Update canonical linux-riscv to version 7.0.0-28.28.1.
- Update bellsoft linux-lts to version 6.1.177-r0.
- Update bellsoft linux-lts to version 6.12.95-r0.
- Update bellsoft linux-lts to version 6.18.35-r1.
- Update linux kernel to version 7.0.12.
- Update debian linux to version 5.10.259-1.
- Update debian linux to version 6.1.176-1.
- Update debian linux to version 6.12.94-1.
- Update debian linux to version 7.0.12-1.
- Update canonical linux-hwe-5.15 to version 5.15.0-194.204~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1110.114~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-194.204~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1110.114~20.04.1.
- Update canonical linux-aws to version 5.15.0-1116.123.
- Update canonical linux-azure to version 5.15.0-1122.131.
- Update canonical linux-azure-6.8 to version 6.8.0-1068.76~22.04.1.
- Update canonical linux-azure-fde to version 5.15.0-1121.130.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1066.73~22.04.1.
- Update canonical linux-gcp to version 5.15.0-1117.127.
- Update canonical linux-gcp-6.8 to version 6.8.0-1069.77~22.04.1.
- Update canonical linux-gke to version 5.15.0-1112.118.
- Update canonical linux-gkeop to version 5.15.0-1099.107.
- Update canonical linux-ibm to version 5.15.0-1110.114.
- Update canonical linux-intel-iotg to version 5.15.0-1111.117.
- Update canonical linux-kvm to version 5.15.0-1108.113.
- Update canonical linux-lowlatency to version 5.15.0-194.204.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-142.142.1~22.04.1.
- Update canonical linux-oracle to version 5.15.0-1113.119.
- Update canonical linux-oracle-6.8 to version 6.8.0-1062.65~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-142.142~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1079.83.
- Update canonical linux-bluefield to version 5.15.0-1100.102.
- Update canonical linux-aws-fips to version 5.15.0-1116.123+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1122.131+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1116.126+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1108.110.
- Update canonical linux-realtime to version 5.15.0-1115.124.
- Update canonical linux-realtime-6.8 to version 6.8.1-1060.61~22.04.1.
- Update canonical linux to version 6.8.0-142.142.
- Update canonical linux-azure to version 6.8.0-1068.76.
- Update canonical linux-azure-7.0 to version 7.0.0-1014.14~24.04.1.
- Update canonical linux-azure-fde to version 6.8.0-1066.73.
- Update canonical linux-gcp to version 6.8.0-1069.77.
- Update canonical linux-gcp-7.0 to version 7.0.0-1011.11~24.04.1.
- Update canonical linux-gke to version 6.8.0-1064.72.
- Update canonical linux-gkeop to version 6.8.0-1050.54.
- Update canonical linux-ibm to version 6.8.0-1065.66.
- Update canonical linux-lowlatency to version 6.8.0-142.142.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1035.38.
- Update canonical linux-oracle to version 6.8.0-1062.65.
- Update canonical linux-raspi to version 6.8.0-1065.69.
- Update canonical linux-bluefield to version 6.8.0-1031.36.
- Update canonical linux-azure-fips to version 6.8.0-1068.76+fips1.
- Update canonical linux-fips to version 6.8.0-142.142+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1068.76+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2054.56.
- Update canonical linux-realtime to version 6.8.1-1060.61.
- Update canonical linux-aws-5.15 to version 5.15.0-1116.123~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1122.131~20.04.1.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1121.130~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1111.117~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1068.70~20.04.1.
- Update canonical linux to version 5.15.0-194.204.
- Update canonical linux-aws-6.8 to version 6.8.0-1065.68~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1111.112.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1063.66~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1068.70.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1057.57.
- Update canonical linux-aws to version 6.8.0-1065.68.
- Update canonical linux-nvidia to version 6.8.0-1063.66.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1063.66.1.
- Update canonical linux-oracle-7.0 to version 7.0.0-1011.11~24.04.1.
- Update canonical linux-aws-fips to version 6.8.0-1065.68+fips1.
- Update canonical linux-fips to version 5.15.0-194.204+fips1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1118.128~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1114.120~20.04.1.
- Update canonical linux-raspi to version 5.15.0-1110.113.
- Update canonical linux-ibm-6.8 to version 6.8.0-1066.67~22.04.1.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update linux linux to version 95b6d772bfe788331d9742d73eaa12e113b2adc4 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1116.123~20.04.1 Fix: upgrade to 5.15.0-1116.123~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1122.131~20.04.1 Fix: upgrade to 5.15.0-1122.131~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1121.130~20.04.1 Fix: upgrade to 5.15.0-1121.130~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1118.128~20.04.1 Fix: upgrade to 5.15.0-1118.128~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-194.204~20.04.1 Fix: upgrade to 5.15.0-194.204~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1110.114~20.04.1 Fix: upgrade to 5.15.0-1110.114~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1111.117~20.04.1 Fix: upgrade to 5.15.0-1111.117~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-194.204~20.04.1 Fix: upgrade to 5.15.0-194.204~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1068.70~20.04.1 Fix: upgrade to 5.15.0-1068.70~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1114.120~20.04.1 Fix: upgrade to 5.15.0-1114.120~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
Showing 50 of 210. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1110.114~20.04.1 Fix: upgrade to 5.15.0-1110.114~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-194.204 Fix: upgrade to 5.15.0-194.204
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1116.123 Fix: upgrade to 5.15.0-1116.123
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1065.68~22.04.1 Fix: upgrade to 6.8.0-1065.68~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1068.76~22.04.1 Fix: upgrade to 6.8.0-1068.76~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1066.73~22.04.1 Fix: upgrade to 6.8.0-1066.73~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1069.77~22.04.1 Fix: upgrade to 6.8.0-1069.77~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1110.114 Fix: upgrade to 5.15.0-1110.114
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1066.67~22.04.1 Fix: upgrade to 6.8.0-1066.67~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1111.117 Fix: upgrade to 5.15.0-1111.117
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1108.113 Fix: upgrade to 5.15.0-1108.113
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-194.204 Fix: upgrade to 5.15.0-194.204
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-142.142.1~22.04.1 Fix: upgrade to 6.8.0-142.142.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1111.112 Fix: upgrade to 5.15.0-1111.112
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1063.66~22.04.1 Fix: upgrade to 6.8.0-1063.66~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1068.70 Fix: upgrade to 5.15.0-1068.70
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1057.57 Fix: upgrade to 5.15.0-1057.57
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1113.119 Fix: upgrade to 5.15.0-1113.119
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1062.65~22.04.1 Fix: upgrade to 6.8.0-1062.65~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1110.113 Fix: upgrade to 5.15.0-1110.113
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-142.142~22.04.1 Fix: upgrade to 6.8.0-142.142~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1079.83 Fix: upgrade to 5.15.0-1079.83
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1100.102 Fix: upgrade to 5.15.0-1100.102
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1060.61~22.04.1 Fix: upgrade to 6.8.1-1060.61~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-7.0 |
< 7.0.0-1014.14~24.04.1 Fix: upgrade to 7.0.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-7.0 |
< 7.0.0-28.28~24.04.1 Fix: upgrade to 7.0.0-28.28~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-7.0 |
< 7.0.0-1016.16~24.04.1 Fix: upgrade to 7.0.0-1016.16~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1063.66.1 Fix: upgrade to 6.8.0-1063.66.1
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-7.0 |
< 7.0.0-28.28.1~24.04.3 Fix: upgrade to 7.0.0-28.28.1~24.04.3
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 | All versions |
| Ubuntu:26.04:LTS | canonical | linux |
< 7.0.0-28.28 Fix: upgrade to 7.0.0-28.28
|
| Ubuntu:26.04:LTS | canonical | linux-aws |
< 7.0.0-1009.9 Fix: upgrade to 7.0.0-1009.9
|
| Ubuntu:26.04:LTS | canonical | linux-azure |
< 7.0.0-1010.10 Fix: upgrade to 7.0.0-1010.10
|
| Ubuntu:26.04:LTS | canonical | linux-azure-fde |
< 7.0.0-1009.9 Fix: upgrade to 7.0.0-1009.9
|
| Ubuntu:26.04:LTS | canonical | linux-gcp |
< 7.0.0-1008.8 Fix: upgrade to 7.0.0-1008.8
|
| Ubuntu:26.04:LTS | canonical | linux-gke |
< 7.0.0-1003.4 Fix: upgrade to 7.0.0-1003.4
|
| Ubuntu:26.04:LTS | canonical | linux-ibm |
< 7.0.0-1010.10 Fix: upgrade to 7.0.0-1010.10
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia |
< 7.0.0-1016.16 Fix: upgrade to 7.0.0-1016.16
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos |
< 7.0.0-2016.16 Fix: upgrade to 7.0.0-2016.16
|
| Ubuntu:26.04:LTS | canonical | linux-oem-7.0 |
< 7.0.0-1009.9 Fix: upgrade to 7.0.0-1009.9
|
| Ubuntu:26.04:LTS | canonical | linux-oracle |
< 7.0.0-1008.8 Fix: upgrade to 7.0.0-1008.8
|
| Ubuntu:26.04:LTS | canonical | linux-raspi |
< 7.0.0-1015.15 Fix: upgrade to 7.0.0-1015.15
|
| Ubuntu:26.04:LTS | canonical | linux-realtime |
< 7.0.0-28.28.1 Fix: upgrade to 7.0.0-28.28.1
|
| Ubuntu:26.04:LTS | canonical | linux-riscv |
< 7.0.0-28.28.1 Fix: upgrade to 7.0.0-28.28.1
|
| Alpaquita:23 | bellsoft | linux-lts |
>= 6.1.175-r0, < 6.1.177-r0 Fix: upgrade to 6.1.177-r0
|
| Alpaquita:25 | bellsoft | linux-lts |
>= 6.12.92-r0, < 6.12.95-r0 Fix: upgrade to 6.12.95-r0
|
| Alpaquita:stream | bellsoft | linux-lts |
>= 6.12.92-r1, < 6.18.35-r1 Fix: upgrade to 6.18.35-r1
|
| – | linux | linux |
< 95b6d772bfe788331d9742d73eaa12e113b2adc4 5.9 |
| Linux | linux | kernel |
>= 6.19.0, < 7.0.12 Fix: upgrade to 7.0.12
|
| Debian:11 | debian | linux |
< 5.10.259-1 Fix: upgrade to 5.10.259-1
|
| Debian:12 | debian | linux |
< 6.1.176-1 Fix: upgrade to 6.1.176-1
|
| Debian:13 | debian | linux |
< 6.12.94-1 Fix: upgrade to 6.12.94-1
|
| Debian:14 | debian | linux |
< 7.0.12-1 Fix: upgrade to 7.0.12-1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1122.131 Fix: upgrade to 5.15.0-1122.131
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1121.130 Fix: upgrade to 5.15.0-1121.130
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1117.127 Fix: upgrade to 5.15.0-1117.127
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1112.118 Fix: upgrade to 5.15.0-1112.118
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1099.107 Fix: upgrade to 5.15.0-1099.107
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1116.123+fips1 Fix: upgrade to 5.15.0-1116.123+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1122.131+fips1 Fix: upgrade to 5.15.0-1122.131+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1116.126+fips1 Fix: upgrade to 5.15.0-1116.126+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1108.110 Fix: upgrade to 5.15.0-1108.110
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1115.124 Fix: upgrade to 5.15.0-1115.124
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-142.142 Fix: upgrade to 6.8.0-142.142
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1068.76 Fix: upgrade to 6.8.0-1068.76
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1066.73 Fix: upgrade to 6.8.0-1066.73
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1069.77 Fix: upgrade to 6.8.0-1069.77
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1064.72 Fix: upgrade to 6.8.0-1064.72
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1050.54 Fix: upgrade to 6.8.0-1050.54
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1065.66 Fix: upgrade to 6.8.0-1065.66
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-142.142.1 Fix: upgrade to 6.8.0-142.142.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1035.38 Fix: upgrade to 6.8.0-1035.38
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1062.65 Fix: upgrade to 6.8.0-1062.65
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1065.69 Fix: upgrade to 6.8.0-1065.69
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1031.36 Fix: upgrade to 6.8.0-1031.36
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1068.76+fips1 Fix: upgrade to 6.8.0-1068.76+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-142.142+fips1 Fix: upgrade to 6.8.0-142.142+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1068.76+fips1 Fix: upgrade to 6.8.0-1068.76+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2054.56 Fix: upgrade to 6.8.0-2054.56
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1060.61 Fix: upgrade to 6.8.1-1060.61
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1065.68 Fix: upgrade to 6.8.0-1065.68
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1063.66 Fix: upgrade to 6.8.0-1063.66
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1065.68+fips1 Fix: upgrade to 6.8.0-1065.68+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-194.204+fips1 Fix: upgrade to 5.15.0-194.204+fips1
|
| – | linux | linux_kernel |
>= 5.9, < 5.10.259 >= 5.11, < 5.15.210 >= 5.16, < 6.1.176 >= 6.2, < 6.6.143 >= 6.7, < 6.12.93 >= 6.13, < 6.18.35 >= 6.19, < 7.0.12 7.1 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 Fix: upgrade to 5.15.0-198.208.aikido.116
|
Original advisory text
tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()
In the Linux kernel, the following vulnerability has been resolved:
tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()
Sashiko found that iptunnel_pmtud_build_icmp() and
iptunnel_pmtud_build_icmpv6() were caching ip_hdr() and ipv6_hdr()
before an skb_cow() call which can reallocate skb->head.
Fix this possible UAF by initializing the local variables
after the skb_cow() call.
Remove skb_reset_network_header() calls which were not needed.
tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()
Sashiko found that iptunnel_pmtud_build_icmp() and
iptunnel_pmtud_build_icmpv6() were caching ip_hdr() and ipv6_hdr()
before an skb_cow() call which can reallocate skb->head.
Fix this possible UAF by initializing the local variables
after the skb_cow() call.
Remove skb_reset_network_header() calls which were not needed.
References
- https://ubuntu.com/security/notices/USN-8728-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8781-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8879-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8817-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8842-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8817-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8817-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8871-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8878-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8906-1 Vendor Advisory
- https://git.kernel.org/stable/c/50750d86a2e5266aba0c295483b3397843198b11 URL
- https://git.kernel.org/stable/c/6dff77899b9e9fe5d854abda3a98ad04e7229ef7 URL
- https://git.kernel.org/stable/c/7254aef4d1a7e18e887af9010e2f2dc34806789b URL
- https://git.kernel.org/stable/c/76cd9398a0470257ab765bdf5f358a2af2e17934 URL
- https://docs.bell-sw.com/security/cves/CVE-2026-63994 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-63994 Vendor Advisory
- https://git.kernel.org/stable/c/95b6d772bfe788331d9742d73eaa12e113b2adc4 URL
- https://git.kernel.org/stable/c/b4bc94353050b1fa7b702bd4c6600710dd926cff URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63994... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-63994 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/CVE-2026-63994 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-63994 Third Party Advisory
- https://git.kernel.org/linus/b4bc94353050b1fa7b702bd4c6600710dd926cff Third Party Advisory
- https://git.kernel.org/stable/c/bf8b3f34c37c162357138e7c0942723b8b94fed1 URL
- https://git.kernel.org/stable/c/f3f204541f280a6ecb04503a0d6794d93990ca43 URL
- https://ubuntu.com/security/notices/USN-8849-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8593-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8603-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8618-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8663-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8664-1 Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-416Use After Free
Timeline
Published19 Jul 2026
Updated11 Oct 2026
First seen19 Jul 2026
Sources
BELL-CVE-2026-63994 · OSV
CVE-2026-63994 · NVD
CVE-2026-63994 · MITRE
CVE-2026-63994 · OSV
DEBIAN-CVE-2026-63994 · OSV
UBUNTU-CVE-2026-63994 · OSV
Track software like this
Free during beta