Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-08-15T00:00:00 kernel: ipvs: ensure inner headers in ICMP errors are in headroom 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CWE-131

In the Linux kernel, the following vulnerability has been resolved: ipvs: ensure inner headers in ICMP errors are in headroom Sashiko points out that after stripping the outer headers with pskb_pull() we should ensure the inner IP headers in ICMP errors from tunnels are present in the skb headroom for functions like ipv4_update_pmtu(), icmp_send() and IP_VS_DBG(). Also, add more checks for the length of the inner headers.

A flaw was found in the Linux kernel's IP Virtual Server (IPVS) component. This vulnerability occurs when the system processes Internet Control Message Protocol (ICMP) errors originating from network tunnels. Specifically, after stripping outer packet headers, the IPVS component fails to ensure that the inner IP headers are correctly positioned in the packet buffer's headroom. This improper handling of network packet headers could lead to incorrect packet processing, potentially resulting in a denial of service (DoS) or other forms of network instability.

Red Hat Enterprise Linux 10 Affected kernel Red Hat Enterprise Linux 6 Under investigation kernel Red Hat Enterprise Linux 7 Affected kernel Red Hat Enterprise Linux 7 Affected kernel-rt Red Hat Enterprise Linux 8 Affected kernel Red Hat Enterprise Linux 8 Affected kernel-rt Red Hat Enterprise Linux 9 Affected kernel Red Hat Enterprise Linux 9 Affected kernel-rt https://www.cve.org/CVERecord?id=CVE-2026-72319 https://nvd.nist.gov/vuln/detail/CVE-2026-72319 https://lore.kernel.org/linux-cve-announce/2026081506-CVE-2026-72319-792e@gregkh/T