CVE-2026-72319

Received Received - Intake

Linux Kernel IPVS ICMP Error Inner Header Handling Vulnerability

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in headroom Sashiko points out that after stripping the outer headers with pskb_pull() we should ensure the inner IP headers in ICMP errors from tunnels are present in the skb headroom for functions like ipv4_update_pmtu(), icmp_send() and IP_VS_DBG(). Also, add more checks for the length of the inner headers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72319

EUVD

EUVD-2026-59218

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper handling of inner headers in ICMP error messages from tunnels. After removing outer headers, the kernel fails to ensure inner IP headers remain in the skb headroom, which could affect functions like pmtu updates and error reporting.

Detection Guidance

This vulnerability is specific to the Linux kernel's IPVS (IP Virtual Server) implementation and involves ICMP error handling for tunnels. Detection requires checking kernel logs for related errors or inspecting kernel code paths handling ICMP errors in IPVS. No direct commands are provided in the context to detect this issue.

Impact Analysis

This could lead to network instability or incorrect error handling in systems using IPVS (IP Virtual Server) with tunnels. It may cause packet processing failures or crashes in affected kernel versions.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level kernel networking issue related to ICMP error handling in IPVS, which does not involve data privacy, security controls, or protected health information.

Mitigation Strategies

Apply the latest Linux kernel patches that address this vulnerability. Monitor kernel security advisories for updates related to IPVS and ICMP error handling. Ensure your kernel version is updated to one that includes the fix for this issue.

Hi! I’m here to help you understand CVE-2026-72319. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70