CVE-2026-72319 ipvs: ensure inner headers in ICMP errors are in headroom
A missing header check in Linux kernel IPVS ICMP error handling can cause a null pointer dereference, leading to a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-72319?
CVE-2026-72319 is a critical vulnerability in Linux, published on 15 Aug 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
ipvs: ensure inner headers in ICMP errors are in headroom
Sashiko points out that after stripping the outer headers with pskb_pull() we should ensure the inner IP headers in ICMP errors from tunnels are present in the skb headroom for functions like ipv4_update_pmtu(), icmp_send() and IP_VS_DBG().
Also, add more checks for the length of the inner headers.
Which versions are affected by CVE-2026-72319?
How do I fix CVE-2026-72319?
Apply the vendor's patch.
Is CVE-2026-72319 being exploited?
There is no known exploitation of CVE-2026-72319 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-72319, DEBIAN-CVE-2026-72319, GHSA-67vj-f5vq-78c5, UBUNTU-CVE-2026-72319.