VulnerabilityAnalyzed
CVE-2026-45850
In the Linux kernel, the following vulnerability has been resolved: ipvs: skip ipv6 extension headers for csum checks Protocol checksum validation fails for IPv6 if there are extension headers before the protocol header. iph->len already contains its…
MEDIUM 5.5EPSS 0.16%
Does this matter?
Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.
Description
In the Linux kernel, the following vulnerability has been resolved: ipvs: skip ipv6 extension headers for csum checks Protocol checksum validation fails for IPv6 if there are extension headers before the protocol header. iph->len already contains its offset, so use it to fix the problem.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.16% probability · 6th percentile
- CISA KEV
- Not listed
- Affected
- linux/linux kernel
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/05cfe9863ef049d98141dc2969eefde72fb07625Patch
- https://git.kernel.org/stable/c/0bf92a90bf05ecafe52e92d5bc15a585021a64acPatch
- https://git.kernel.org/stable/c/54add3b7d3c154ca89ef5bac2582b0ed1a3a15d5Patch
- https://git.kernel.org/stable/c/768f665f3685b455ed686370ed7ccb852a125a3bPatch
- https://git.kernel.org/stable/c/9aa7edc1347b98774e5167ca34e5b8aa6083bde7Patch
- https://git.kernel.org/stable/c/a3ca27762ce8476b4fbf9b2a8f5cb74c38e483e4Patch
- https://git.kernel.org/stable/c/cdce1e797addab72393c0dfee31aaca41ef7d937Patch
- https://git.kernel.org/stable/c/d643c1ec80b70508f54dac12179e36920e2c00dePatch
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.