{"id":"CVE-2026-72319","revision":"ca83794e236b468e8ccb054a7baf7d24","records":[{"revision":"ca83794e236b468e8ccb054a7baf7d24","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-72319","aliases":[],"title":"ipvs: ensure inner headers in ICMP errors are in headroom","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nipvs: ensure inner headers in ICMP errors are in headroom\n\nSashiko points out that after stripping the outer headers\nwith pskb_pull() we should ensure the inner IP headers\nin ICMP errors from tunnels are present in the skb headroom\nfor functions like ipv4_update_pmtu(), icmp_send() and\nIP_VS_DBG().\n\nAlso, add more checks for the length of the inner headers.","state":0,"publishedAt":"2026-08-15T05:55:32.313+00:00","modifiedAt":"2026-10-16T18:55:17.469+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/ipvs/ip_vs_core.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e\",\n                            \"lessThan\": \"19657b3a17b774ae4e2f2635b5ae8638c9344a40\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e\",\n                            \"lessThan\": \"dac813101914c21219ac221a60a31a11bc90e7ec\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e\",\n                            \"lessThan\": \"dd22f74a09e25ca298ced0a3763ef353242cb78d\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e\",\n                            \"lessThan\": \"9bc9b95aee2b2e3f1301a16a67ee504960402875\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e\",\n                            \"lessThan\": \"a735f9964a3d9ed97daf9b08507f8b5bcafe6326\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e\",\n                            \"lessThan\": \"8f48cfe657409fb5c7ba0521b14da6d47546d9cf\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e\",\n                            \"lessThan\": \"92185d6f7819bc558939ae83de7b1abe90e3b5c2\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"f2edb9f7706dcb2c0d9a362b2ba849efe3a97f5e\",\n                            \"lessThan\": \"3f7a535ff0fa627a0132803e4c2f903ceffcbc1c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"net/netfilter/ipvs/ip_vs_core.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3.7\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"3.7\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.10.261\",\n                            \"lessThanOrEqual\": \"5.10.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"5.15.212\",\n                            \"lessThanOrEqual\": \"5.15.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.1.178\",\n                            \"lessThanOrEqual\": \"6.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.145\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.97\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.40\",\n                            \"lessThanOrEqual\": \"6.18.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.1.5\",\n                            \"lessThanOrEqual\": \"7.1.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8,"severity":"CRITICAL"}],"references":["https://git.kernel.org/stable/c/19657b3a17b774ae4e2f2635b5ae8638c9344a40","https://git.kernel.org/stable/c/dac813101914c21219ac221a60a31a11bc90e7ec","https://git.kernel.org/stable/c/dd22f74a09e25ca298ced0a3763ef353242cb78d","https://git.kernel.org/stable/c/9bc9b95aee2b2e3f1301a16a67ee504960402875","https://git.kernel.org/stable/c/a735f9964a3d9ed97daf9b08507f8b5bcafe6326","https://git.kernel.org/stable/c/8f48cfe657409fb5c7ba0521b14da6d47546d9cf","https://git.kernel.org/stable/c/92185d6f7819bc558939ae83de7b1abe90e3b5c2","https://git.kernel.org/stable/c/3f7a535ff0fa627a0132803e4c2f903ceffcbc1c"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72319","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-72319","identifiers":["CVE-2026-72319"]},"retained":false,"historicalAffected":[]}],"coverage":[]}