CVE-2026-63912: Linux 5.18

Affected technology

Linux · c075c3ea031757f8ea2d34567565b61a868c08d5 to before 566295735530ee513326049b0540f32ec050bf2e, a583f2f3c8788bffd7fd7baeb76bd6d80543d7ea to before 5d7ab86e2b6bc23054616bf6ac562013bf60af8c, 5bd8baab087dff657e05387aee802e70304cc813 to before 36519e3d941fc99d3b52c134dbaf311f987a4708, 5bd8baab087dff657e05387aee802e70304cc813 to before 322e48187e0245ab2fff6fec2220b0cae677dbec, 5bd8baab087dff657e05387aee802e70304cc813 to before b84091ceddc9f133229dceab3ccc930bf27f9cba, 5bd8baab087dff657e05387aee802e70304cc813 to before c093468aea8277f77272a4f199b2e15e19cabb59, 5bd8baab087dff657e05387aee802e70304cc813 to before 65f3b3fc2347b89fe21db1e92c7681368415f095, 5bd8baab087dff657e05387aee802e70304cc813 to before dfa0d7b0ff1eb6b2c416b8fdb9b4f2cefba57a40, 2c66b0c95bb0aa7652ba1eba293d0d5993b35a38, ef6f83df1209a7d9bd1c605a62457d4c00f9179e, 3defefd22ad5fbbe639b6157fb7e6311b2bf333d, b657030870bb5351c5b1e84d4e9f186da6ca0496, 5.10.113 to before 5.10.259, 5.15.36 to before 5.15.210, 4.14.288 to before 4.15, 4.19.252 to before 4.20, 5.4.205 to before 5.5, 5.17.5 to before 5.18
Linux

Linux · 5.18
Linux

Component: Not specified by the source
File: net/ipv4/esp4.c, net/ipv6/esp6.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.