CVE-2026-63984: ipv6: rpl: fix hdrlen overflow in ipv6_rpl_srh_decompress()
In the Linux kernel, the following vulnerability has been resolved:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.187-1Fixed in 6.12.107-1Fixed in 6.12.111-1Fixed in 7.2.8-1Fixed in 7.2.9-1 - Configuration
Tighten the existing guard from (n + 1) > 255 to (n + 1) > 127 so hdrlen remains within the __u8 range.
Linux kernel ipv6_rpl_srh_decompress()/ipv6_rpl_srh_rcv() RPL segment-count guard = (n + 1) > 127
Event History
Frequently Asked Questions
What is the severity of CVE-2026-63984?
The severity of CVE-2026-63984 is critical with a CVSS score of 9.8.
What is CVE-2026-63984 about?
CVE-2026-63984 addresses a header length overflow vulnerability in the IPv6 RPL component of the Linux kernel.
How do I fix CVE-2026-63984?
To fix CVE-2026-63984, update your Linux kernel to the latest version that includes the patch for this vulnerability.
What impact does CVE-2026-63984 have?
CVE-2026-63984 can lead to potential denial of service or exploit through header length truncation in IPv6 RPL processing.
When was CVE-2026-63984 published?
CVE-2026-63984 was published on July 19, 2026.