01 Record

CVE-2026-63968

ipv6: fix possible infinite loop in fib6_select_path()

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

View raw JSON

02 Description

ipv6: fix possible infinite loop in fib6_select_path()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatableyesAn attacker can reliably automate reconnaissance through exploitation, so this scales.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.66% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 51.6% of scored records. A rank, not a probability.

NVD base score

7.5 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD analysis status

Awaiting Analysis. NVD last modified this record on 2026-10-19.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-07-19 14:55Z3 MO AGO

Last updated

2026-10-19 20:17Z10 DAYS AGO

Reserved

2026-07-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')Base

Data version

5.2

Document digest

8ebb197112c5a2ccfe4dce657c4963189499775f6bdff53ea0927fcda5d38f2e

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxd0ec61c9f3583b76aebdbb271f5c0d3fcccd48b2 to < 3948a7d92f7678e89e1776bb2d169afcad63b1ae, 52da02521ede55fb86546c3fffd9377b3261b91f to < c87cd3cb309634bc8f50a54e2079424f219ac21f, 34a949e7a0869dfa31a40416d2a56973fae1807b to < 0f7b73c3452635de83b8711b31abdda8e49aad7b, d9ccb18f83ea2bb654289b6ecf014fd267cc988b to < ab9a10969a907b472a0196d999c08ff7144172e3, d9ccb18f83ea2bb654289b6ecf014fd267cc988b to < 9b9d5bd6e3d4c9cecab5407604b690684b2532d2, d9ccb18f83ea2bb654289b6ecf014fd267cc988b to < 9c7da87c2dc860bb17ca1ece942495d28b1ce3b9, 11edcd026012ac18acee0f1514db3ed1b160fc6f, 6.1.128 to < 6.1.176, 6.6.75 to < 6.6.143, 6.12.2 to < 6.12.93, 6.11.11 to < 6.12, 6.13—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/3948a7d92f7678e89e1776bb2d169afcad63b1ae
git.kernel.orghttps://git.kernel.org/stable/c/c87cd3cb309634bc8f50a54e2079424f219ac21f
git.kernel.orghttps://git.kernel.org/stable/c/0f7b73c3452635de83b8711b31abdda8e49aad7b
git.kernel.orghttps://git.kernel.org/stable/c/ab9a10969a907b472a0196d999c08ff7144172e3
git.kernel.orghttps://git.kernel.org/stable/c/9b9d5bd6e3d4c9cecab5407604b690684b2532d2
git.kernel.orghttps://git.kernel.org/stable/c/9c7da87c2dc860bb17ca1ece942495d28b1ce3b9

07 Fixed in

Debian 12

linux
Fixed in 6.1.176-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.94-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.0.12-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.