Description
In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in headroom Sashiko points out that after stripping the outer headers with pskb_pull() we should ensure the inner IP headers in ICMP errors from tunnels are present in the skb headroom for functions like ipv4_update_pmtu(), icmp_send() and IP_VS_DBG(). Also, add more checks for the length of the inner headers.
CVSS 9.8EPSS 0.745%Risque 1.05
Voir la source- Publication
- 2026-08-15 06:22:04
- Versions concernées
- unknown
- Type
- Noyau
- Dernière modification
- 2026-08-17 06:18:35
- Vecteur
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H