PT-2026-72507

CVE-2026-72319

·

Published

2026-07-07

·

Updated

2026-11-03

Description by

CVSS 2.0
10
Critical
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the ipvs component where inner IP headers in ICMP errors from tunnels may not be correctly placed in the skb headroom after outer headers are stripped using the pskb pull() function. This is necessary for the proper operation of functions such as ipv4 update pmtu(), icmp send(), and IP VS DBG(). Additionally, the system lacked sufficient checks for the length of the inner headers.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
CLSA-2026-1792977831
CLSA-2026-1792979087
OESA-2026-3703
OESA-2026-3704
OPENSUSE-SU-2026:22167-1
SUSE-SU-2026:24371-1
SUSE-SU-2026:24379-1
SUSE-SU-2026:24386-1
SUSE-SU-2026:24422-1
SUSE-SU-2026:24437-1
SUSE-SU-2026:24446-1
SUSE-SU-2026:24473-1
SUSE-SU-2026:4892-1
SUSE-SU-2026:4935-1
SUSE-SU-2026:4940-1
USN-8781-1
USN-8816-1
USN-8816-2
USN-8816-3
USN-8816-4
USN-8875-1
USN-8875-2
USN-8876-1
USN-8877-1
USN-8878-1
USN-8879-1
USN-8888-1
USN-8888-2
USN-8917-1
USN-8918-1
USN-8963-1
Found an issue in the description? Have something to add? Feel free to write us 👾