ipv6: validate extension header length before copying to cmsg

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-63920 · Microsoft / collected KEV context

cve-program · CVE-2026-63920

• https://git.kernel.org/stable/c/81394827dfb72772c50d0ae3bdfa094428a5d76d
• https://git.kernel.org/stable/c/931b4a1f13408c2507719890f78f7227c34a0282
• https://git.kernel.org/stable/c/08464413e628803bd10cb1df68d0138665f2f885
• https://git.kernel.org/stable/c/a29768d56eb3798c052ad3281b05596e695a17af
• https://git.kernel.org/stable/c/0d330eff318c0f44d4fb0ad2c2aef38f87f24c90
• https://git.kernel.org/stable/c/a35daeabb433686234b010ebf7b53778dbd6c9b8
• https://git.kernel.org/stable/c/eb18a1b1644e4cad978df2131e2bb9a2e6886992
• https://git.kernel.org/stable/c/dd433671fef381fdaf7b530c631e6b782d66e224

No related operational record is retained in the current change model.