CVE-2026-53263: 6lowpan: fix off-by-one in multicast context address compression
6lowpan: fix off-by-one in multicast context address compression
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Compensating control
In lowpan_iphc_mcast_ctx_addr_compress(), change the second memcpy offsets to use &data[2] as the destination and &ipaddr->s6_addr[12] as the source, matching the expected compressed multicast address layout.
- Compensating control
Zero-initialize the data array before populating the compressed multicast address to prevent uninitialized kernel stack memory from being transmitted.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53263?
CVE-2026-53263 has a risk rating of 33.
What systems are affected by CVE-2026-53263?
CVE-2026-53263 affects the Linux kernel.
How do I fix CVE-2026-53263?
To fix CVE-2026-53263, ensure that you apply the relevant patches provided for the Linux kernel.
What type of vulnerability is CVE-2026-53263?
CVE-2026-53263 is an off-by-one error in multicast context address compression.
When was CVE-2026-53263 published?
CVE-2026-53263 was published on June 25, 2026.