CVE-2026-46037: ipv4: icmp: validate reply type before using icmp_pointers
In the Linux kernel, the following vulnerability has been resolved:
ipv4: icmp: validate reply type before using icmppointers
Extended echo replies use ICMPEXTECHOREPLY as the outbound reply type. That value is outside the range covered by icmppointers[], which only describes the traditional ICMP types up to NRICMPTYPES.
Avoid consulting icmppointers[] for reply types outside that range, and use arrayindexnospec() for the remaining in-range lookup. Normal ICMP replies keep their existing behavior unchanged.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.141.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-46037?
CVE-2026-46037 has a high severity rating of 8.2.
What type of vulnerability is CVE-2026-46037?
CVE-2026-46037 is an ICMP reply validation issue in the Linux kernel.
How do I fix CVE-2026-46037?
To fix CVE-2026-46037, update your Linux kernel to the latest patched version.
What impact does CVE-2026-46037 have on system security?
CVE-2026-46037 may lead to the exploitation of the system due to improper handling of ICMP replies.
Which systems are affected by CVE-2026-46037?
CVE-2026-46037 affects the Linux kernel, including Microsoft azl3 kernel version 6.6.139.1-1.