In the Linux kernel, the following vulnerability has been resolved:

ipvs: ensure inner headers in ICMP errors are in headroom

Sashiko points out that after stripping the outer headers
with pskb_pull() we should ensure the inner IP headers
in ICMP errors from tunnels are present in the skb headroom
for functions like ipv4_update_pmtu(), icmp_send() and
IP_VS_DBG().

Also, add more checks for the length of the inner headers.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e affected < 19657b3a17b774ae4e2f2635b5ae8638c9344a40
f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e affected < dac813101914c21219ac221a60a31a11bc90e7ec
f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e affected < dd22f74a09e25ca298ced0a3763ef353242cb78d
f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e affected < 9bc9b95aee2b2e3f1301a16a67ee504960402875
f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e affected < a735f9964a3d9ed97daf9b08507f8b5bcafe6326
f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e affected < 8f48cfe657409fb5c7ba0521b14da6d47546d9cf
f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e affected < 92185d6f7819bc558939ae83de7b1abe90e3b5c2
f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e affected < 3f7a535ff0fa627a0132803e4c2f903ceffcbc1c
Linux Linux affected
Version Status Constraints
3.7 affected —
0 unaffected < 3.7
5.10.261 unaffected ≤ 5.10.*
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc3 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/19657b3a17b774ae4e2f2635b5ae8638c9344a40 cve-icon cve-icon
https://git.kernel.org/stable/c/3f7a535ff0fa627a0132803e4c2f903ceffcbc1c cve-icon cve-icon
https://git.kernel.org/stable/c/8f48cfe657409fb5c7ba0521b14da6d47546d9cf cve-icon cve-icon
https://git.kernel.org/stable/c/92185d6f7819bc558939ae83de7b1abe90e3b5c2 cve-icon cve-icon
https://git.kernel.org/stable/c/9bc9b95aee2b2e3f1301a16a67ee504960402875 cve-icon cve-icon
https://git.kernel.org/stable/c/a735f9964a3d9ed97daf9b08507f8b5bcafe6326 cve-icon cve-icon
https://git.kernel.org/stable/c/dac813101914c21219ac221a60a31a11bc90e7ec cve-icon cve-icon
https://git.kernel.org/stable/c/dd22f74a09e25ca298ced0a3763ef353242cb78d cve-icon cve-icon
History

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in headroom Sashiko points out that after stripping the outer headers with pskb_pull() we should ensure the inner IP headers in ICMP errors from tunnels are present in the skb headroom for functions like ipv4_update_pmtu(), icmp_send() and IP_VS_DBG(). Also, add more checks for the length of the inner headers.
Title ipvs: ensure inner headers in ICMP errors are in headroom
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:55:32.313Z

Reserved: 2026-08-09T03:40:39.919Z

Link: CVE-2026-72319

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:04.857

Modified: 2026-08-15T06:22:04.857

Link: CVE-2026-72319

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.