CVE-2026-63924 - Vulnerability Details

- ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()

Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()

ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers.
Let's recompute nh pointer to make sure any change won't mess things up.

Published: 2026-07-19

Score: 9.8 Critical

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< b3ac54e5c905f86d22b502eacb5686a282c5659f
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 645b99b1a185c91a79bdac4c5de0f91b212d64f0
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 9e883eaa878f4337b5873c706efb5a192364ed18
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< bddaa4dfc7f36e1ee343a0622f69288af2b9ace9
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 72af7beae774e46ed543f3f2f267bf0a141bfcdd
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< c512e1c819dfbf6ae95ee7a44b65b9ad98979157
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< 2b56bbd928c030894c270cd33d60286326919458
`1da177e4c3f41524e886b7f1b8a0c1fc7321cac2`	affected	< d47548a36639095939f4747d4c43f2271366f565

Linux

affected

Version	Status	Constraints
`2.6.12`	affected	—
`0`	unaffected	< 2.6.12
`5.10.259`	unaffected	≤ 5.10.*
`5.15.210`	unaffected	≤ 5.15.*
`6.1.176`	unaffected	≤ 6.1.*
`6.6.143`	unaffected	≤ 6.6.*
`6.12.93`	unaffected	≤ 6.12.*
`6.18.35`	unaffected	≤ 6.18.*
`7.0.12`	unaffected	≤ 7.0.*
`7.1`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,b3ac54e5c905f86d22b502eacb5686a282c5659f)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,645b99b1a185c91a79bdac4c5de0f91b212d64f0)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,9e883eaa878f4337b5873c706efb5a192364ed18)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,bddaa4dfc7f36e1ee343a0622f69288af2b9ace9)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,72af7beae774e46ed543f3f2f267bf0a141bfcdd)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,c512e1c819dfbf6ae95ee7a44b65b9ad98979157)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,2b56bbd928c030894c270cd33d60286326919458)`	affected	code_commit	—
`[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,d47548a36639095939f4747d4c43f2271366f565)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`2.6.12`	affected	semver	—
`[0,2.6.12)`	unaffected	semver	—
`[5.10.259,5.11.0)`	unaffected	semver	—
`[5.15.210,5.16.0)`	unaffected	semver	—
`[6.1.176,6.2.0)`	unaffected	semver	—
`[6.6.143,6.7.0)`	unaffected	semver	—
`[6.12.93,6.13.0)`	unaffected	semver	—
`[6.18.35,6.19.0)`	unaffected	semver	—
`[7.0.12,7.1.0)`	unaffected	semver	—
`[7.1,*]`	unaffected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0021.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/2b56bbd928c030894c270cd33d60286326919458
https://git.kernel.org/stable/c/645b99b1a185c91a79bdac4c5de0f91b212d64f0
https://git.kernel.org/stable/c/72af7beae774e46ed543f3f2f267bf0a141bfcdd
https://git.kernel.org/stable/c/9e883eaa878f4337b5873c706efb5a192364ed18
https://git.kernel.org/stable/c/b3ac54e5c905f86d22b502eacb5686a282c5659f
https://git.kernel.org/stable/c/bddaa4dfc7f36e1ee343a0622f69288af2b9ace9
https://git.kernel.org/stable/c/c512e1c819dfbf6ae95ee7a44b65b9ad98979157
https://git.kernel.org/stable/c/d47548a36639095939f4747d4c43f2271366f565

History

Mon, 20 Jul 2026 14:45:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

Sun, 19 Jul 2026 15:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo() ipv6_hop_jumbo() calls pskb_trim_rcsum(), which can change skb pointers. Let's recompute nh pointer to make sure any change won't mess things up.
Title		ipv6: exthdrs: refresh nh pointer after ipv6_hop_jumbo()
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/2b56bbd928c030894c270cd33d60286326919458 https://git.kernel.org/stable/c/645b99b1a185c91a79bdac4c5de0f91b212d64f0 https://git.kernel.org/stable/c/72af7beae774e46ed543f3f2f267bf0a141bfcdd https://git.kernel.org/stable/c/9e883eaa878f4337b5873c706efb5a192364ed18 https://git.kernel.org/stable/c/b3ac54e5c905f86d22b502eacb5686a282c5659f https://git.kernel.org/stable/c/bddaa4dfc7f36e1ee343a0622f69288af2b9ace9 https://git.kernel.org/stable/c/c512e1c819dfbf6ae95ee7a44b65b9ad98979157 https://git.kernel.org/stable/c/d47548a36639095939f4747d4c43f2271366f565

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-07-19T14:55:25.702Z

Updated: 2026-07-20T13:41:34.095Z

Reserved: 2026-07-19T07:54:57.021Z

Link: CVE-2026-63924

Vulnrichment

No data.

NVD

No data.

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-07-21T10:30:04Z

Weaknesses

No weakness.

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object