01 Record

CVE-2026-45850

ipvs: skip ipv6 extension headers for csum checks

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

ipvs: skip ipv6 extension headers for csum checks

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.16% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 5.2% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-10-15.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2026-05-27 12:15Z5 MO AGO
Last updated: 2026-10-15 01:19Z14 DAYS AGO
Reserved: 2026-05-13
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 7c4d9963720e595060351b98197022fc769b0364fa45c7bcc51cf61769651c97

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux0bbdd42b7efa66685b6d74701bcde3a596a3a59d to < 0bf92a90bf05ecafe52e92d5bc15a585021a64ac, 0bbdd42b7efa66685b6d74701bcde3a596a3a59d to < 54add3b7d3c154ca89ef5bac2582b0ed1a3a15d5, 0bbdd42b7efa66685b6d74701bcde3a596a3a59d to < 768f665f3685b455ed686370ed7ccb852a125a3b, 0bbdd42b7efa66685b6d74701bcde3a596a3a59d to < 9aa7edc1347b98774e5167ca34e5b8aa6083bde7, 0bbdd42b7efa66685b6d74701bcde3a596a3a59d to < d643c1ec80b70508f54dac12179e36920e2c00de, 0bbdd42b7efa66685b6d74701bcde3a596a3a59d to < cdce1e797addab72393c0dfee31aaca41ef7d937, 0bbdd42b7efa66685b6d74701bcde3a596a3a59d to < a3ca27762ce8476b4fbf9b2a8f5cb74c38e483e4, 0bbdd42b7efa66685b6d74701bcde3a596a3a59d to < 05cfe9863ef049d98141dc2969eefde72fb07625, 2.6.28—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/0bf92a90bf05ecafe52e92d5bc15a585021a64ac
git.kernel.orghttps://git.kernel.org/stable/c/54add3b7d3c154ca89ef5bac2582b0ed1a3a15d5
git.kernel.orghttps://git.kernel.org/stable/c/768f665f3685b455ed686370ed7ccb852a125a3b
git.kernel.orghttps://git.kernel.org/stable/c/9aa7edc1347b98774e5167ca34e5b8aa6083bde7
git.kernel.orghttps://git.kernel.org/stable/c/d643c1ec80b70508f54dac12179e36920e2c00de
git.kernel.orghttps://git.kernel.org/stable/c/cdce1e797addab72393c0dfee31aaca41ef7d937
git.kernel.orghttps://git.kernel.org/stable/c/a3ca27762ce8476b4fbf9b2a8f5cb74c38e483e4
git.kernel.orghttps://git.kernel.org/stable/c/05cfe9863ef049d98141dc2969eefde72fb07625
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-784472.html

07 Fixed in

Debian 12

linux
Fixed in 6.1.176-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.94-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.19.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.