High [CVE-2026-53006] fix possible UAF in icmpv6_rcv
This high-severity Red Hat Linux advisory covers CVE-2026-53006 affecting Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On.
Aggregated and source-linked by VulniPulse. Data sources, validation and limitations.
VulniPulse record published Record updated
Android app · Google Play
Monitor future Red Hat Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.
Summary
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible UAF in icmpv6_rcv() Caching saddr and daddr before pskb_pull() is problematic since skb->head can change.
Remove these temporary variables: - We only access &ipv6_hdr(skb)->saddr and &ipv6_hdr(skb)->daddr when net_dbg_ratelimited() is called in the slow path. - Avoid potential future misuse after pskb_pull() call. A flaw was found in the Linux kernel's IPv6 (Internet Protocol version 6) implementation.
This vulnerability, a Use-After-Free (UAF) error, occurs due to incorrect caching of network packet addresses before a memory operation. An attacker could potentially exploit this flaw to cause memory corruption, which may lead to a denial of service or, in some scenarios, arbitrary code execution.
Red Hat severity: Important — CVSS 7 (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H). Weakness: CWE-825.
Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support; and 7 more.
Affected versions
No affected-version range was extracted from the source record. The vendor advisory is authoritative — check it before change work.
Official advisory · high-confidence parse· fetched 21 days ago·verify at source
- kernel-0:6.12.0-211.40.1.el10_2
- kernel-0:6.12.0-55.103.1.el10_0
- kernel-rt-0:4.18.0-553.148.1.rt7.489.el8_10
- kernel-0:4.18.0-553.148.1.el8_10
- kernel-0:4.18.0-305.206.1.el8_4
- kernel-0:4.18.0-372.213.1.el8_6
- kernel-0:4.18.0-477.163.1.el8_8
- kernel-0:5.14.0-687.30.1.el9_8
- kernel-0:5.14.0-284.191.1.el9_2
- kernel-rt-0:5.14.0-284.191.1.rt14.476.el9_2
- kernel-0:5.14.0-427.149.1.el9_4
- kernel-0:5.14.0-570.138.1.el9_6
- RHSA-2026:47017
- RHSA-2026:64767
- RHSA-2026:47010
- RHSA-2026:47011
- RHSA-2026:65710
- RHSA-2026:65711
- RHSA-2026:61932
- RHSA-2026:45192
- RHSA-2026:67723
- RHSA-2026:67721
- RHSA-2026:65712
- RHSA-2026:62568
Official advisory · high-confidence parse· fetched 21 days ago·verify at source
Mitigation
Upgrade to a fixed release: kernel-0:6.12.0-211.40.1.el10_2, kernel-0:6.12.0-55.103.1.el10_0, kernel-rt-0:4.18.0-553.148.1.rt7.489.el8_10, kernel-0:4.18.0-553.148.1.el8_10, kernel-0:4.18.0-305.206.1.el8_4, kernel-0:4.18.0-372.213.1.el8_6. That is the remediation for this advisory.
The vendor advisory may list additional interim mitigations or workarounds not captured here — review it before change work.
Official advisory · high-confidence parse· fetched 21 days ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.