GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-68127 (GCVE-0-2026-68127)

Vulnerability from cvelistv5 – Published: 2026-08-10 11:58 – Updated: 2026-08-19 16:29
VLAI
Title
ila: reload IPv6 header after pskb_may_pull in checksum adjust
Summary
In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskb_may_pull in checksum adjust ila_csum_adjust_transport() caches ip6h = ipv6_hdr(skb) before calling pskb_may_pull(). On a non-linear skb whose transport header sits in a page fragment, pskb_may_pull() can call __pskb_pull_tail() / pskb_expand_head() and free the old skb head, leaving ip6h dangling; the following get_csum_diff(ip6h, p) then reads freed memory. ila_update_ipv6_locator() uses ip6h (and the iaddr derived from it) again after the csum-adjust call and additionally writes the new locator through that pointer. Impact: a remote IPv6 packet routed through a configured ILA csum-adjust-transport route or receive-side mapping triggers a slab-use-after-free in ila_update_ipv6_locator() (KASAN). The route or mapping requires CAP_NET_ADMIN to configure, but trigger packets are unauthenticated once it exists. Reload ip6h after each pskb_may_pull() in ila_csum_adjust_transport() before the csum-diff read. In ila_update_ipv6_locator() only the ILA_CSUM_ADJUST_TRANSPORT case pulls the skb, so reload ip6h and iaddr in that case alone before the destination-address write; the neutral-map modes never pull and keep their cached pointers.
Severity
9.8 (Critical)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 33f11d16142b06588eedfc1dd8cf93790979a712 , < e451a904606c571f731ef7a06b3398619dce5300 (git)
Affected: 33f11d16142b06588eedfc1dd8cf93790979a712 , < 1eadcb43893b897ade85ac5bf5c618054bc3c655 (git)
Affected: 33f11d16142b06588eedfc1dd8cf93790979a712 , < ba353caafb06ccee57b78d3254e3cebf1dea4a93 (git)
Affected: 33f11d16142b06588eedfc1dd8cf93790979a712 , < 896a9512d0d83c2a4b357e5585b7b62a8e3f95c1 (git)
Affected: 33f11d16142b06588eedfc1dd8cf93790979a712 , < 7097a0280b178237265681be66d1bef11d15894b (git)
Affected: 33f11d16142b06588eedfc1dd8cf93790979a712 , < 472aba2603ca74c4f7722cb0c0296942b0776b8d (git)
Affected: 33f11d16142b06588eedfc1dd8cf93790979a712 , < c6a13ae00dab3a1a8c7cf2f843f0fc9e8d4b0ccc (git)
Affected: 33f11d16142b06588eedfc1dd8cf93790979a712 , < 92d3817649df2b0b6a008a686c8275c88d7ef594 (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.5
Unaffected: 0 , < 4.5 (semver)
Unaffected: 5.10.265 , ≤ 5.10.* (semver)
Unaffected: 5.15.216 , ≤ 5.15.* (semver)
Unaffected: 6.1.183 , ≤ 6.1.* (semver)
Unaffected: 6.6.148 , ≤ 6.6.* (semver)
Unaffected: 6.12.101 , ≤ 6.12.* (semver)
Unaffected: 6.18.42 , ≤ 6.18.* (semver)
Unaffected: 7.1.6 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/ila/ila_common.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "e451a904606c571f731ef7a06b3398619dce5300",
              "status": "affected",
              "version": "33f11d16142b06588eedfc1dd8cf93790979a712",
              "versionType": "git"
            },
            {
              "lessThan": "1eadcb43893b897ade85ac5bf5c618054bc3c655",
              "status": "affected",
              "version": "33f11d16142b06588eedfc1dd8cf93790979a712",
              "versionType": "git"
            },
            {
              "lessThan": "ba353caafb06ccee57b78d3254e3cebf1dea4a93",
              "status": "affected",
              "version": "33f11d16142b06588eedfc1dd8cf93790979a712",
              "versionType": "git"
            },
            {
              "lessThan": "896a9512d0d83c2a4b357e5585b7b62a8e3f95c1",
              "status": "affected",
              "version": "33f11d16142b06588eedfc1dd8cf93790979a712",
              "versionType": "git"
            },
            {
              "lessThan": "7097a0280b178237265681be66d1bef11d15894b",
              "status": "affected",
              "version": "33f11d16142b06588eedfc1dd8cf93790979a712",
              "versionType": "git"
            },
            {
              "lessThan": "472aba2603ca74c4f7722cb0c0296942b0776b8d",
              "status": "affected",
              "version": "33f11d16142b06588eedfc1dd8cf93790979a712",
              "versionType": "git"
            },
            {
              "lessThan": "c6a13ae00dab3a1a8c7cf2f843f0fc9e8d4b0ccc",
              "status": "affected",
              "version": "33f11d16142b06588eedfc1dd8cf93790979a712",
              "versionType": "git"
            },
            {
              "lessThan": "92d3817649df2b0b6a008a686c8275c88d7ef594",
              "status": "affected",
              "version": "33f11d16142b06588eedfc1dd8cf93790979a712",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "net/ipv6/ila/ila_common.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.5"
            },
            {
              "lessThan": "4.5",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.265",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.216",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.183",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.148",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.101",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.42",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.6",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.265",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.216",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.183",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.148",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.101",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.42",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.6",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "4.5",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nila: reload IPv6 header after pskb_may_pull in checksum adjust\n\nila_csum_adjust_transport() caches ip6h = ipv6_hdr(skb) before calling\npskb_may_pull(). On a non-linear skb whose transport header sits in a page\nfragment, pskb_may_pull() can call __pskb_pull_tail() / pskb_expand_head()\nand free the old skb head, leaving ip6h dangling; the following\nget_csum_diff(ip6h, p) then reads freed memory. ila_update_ipv6_locator()\nuses ip6h (and the iaddr derived from it) again after the csum-adjust\ncall and additionally writes the new locator through that pointer.\n\nImpact: a remote IPv6 packet routed through a configured ILA\ncsum-adjust-transport route or receive-side mapping triggers a\nslab-use-after-free in ila_update_ipv6_locator() (KASAN). The route or\nmapping requires CAP_NET_ADMIN to configure, but trigger packets are\nunauthenticated once it exists.\n\nReload ip6h after each pskb_may_pull() in ila_csum_adjust_transport()\nbefore the csum-diff read. In ila_update_ipv6_locator() only the\nILA_CSUM_ADJUST_TRANSPORT case pulls the skb, so reload ip6h and iaddr in\nthat case alone before the destination-address write; the neutral-map\nmodes never pull and keep their cached pointers."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - The bug is reached from ipv6_rcv() through NF_INET_PRE_ROUTING (ila_nf_input) or IPv6 routing/LWT input/output when remote IPv6 packets matching a configured ILA csum-adjust-transport mapping or route are processed; no local syscall is required on internet-facing routers, gateways, or NVO3/overlay hosts.\nAC:L - Once ILA csum-adjust-transport is configured, a remote attacker can reliably send IPv6 TCP/UDP/ICMPv6 packets whose transport headers live in skb page fragments so pskb_may_pull() reallocates the head; they control packet layout and can retry without races or uncontrollable memory layout.\nPR:N - Trigger packets are processed unauthenticated on the network datapath; although ILA routes/mappings require CAP_NET_ADMIN to install, that is operator infrastructure (also obtainable in a user netns), not a privilege the remote attacker needs to send the malformed IPv6 packets that hit ila_update_ipv6_locator().\nUI:N - No victim user action is required beyond normal IPv6 packet delivery; exploitation is fully automated once the affected ILA configuration exists and the attacker sends crafted packets to the host.\nS:U - The slab use-after-free corrupts kernel packet-processing memory within the host kernel security authority; it is not a VM escape, container breakout, or IOMMU/DMA boundary bypass.\nC:H - ila_csum_adjust_transport() reads the cached IPv6 header via get_csum_diff(ip6h, p) after pskb_may_pull() frees the old skb head, causing a slab use-after-free read of freed memory that can disclose kernel heap contents.\nI:H - ila_update_ipv6_locator() then writes iaddr-\u003eloc = p-\u003elocator through the same stale iaddr pointer derived from the freed header, giving a slab use-after-free write primitive that can be leveraged for arbitrary memory corruption and control-flow hijacking.\nA:H - The freed skb-head slab use-after-free was reproduced under KASAN and can cause kernel oops/panic during IPv6 receive/forwarding; even unsuccessful exploitation typically crashes or destabilizes the host."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-19T16:29:41.771Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/e451a904606c571f731ef7a06b3398619dce5300"
        },
        {
          "url": "https://git.kernel.org/stable/c/1eadcb43893b897ade85ac5bf5c618054bc3c655"
        },
        {
          "url": "https://git.kernel.org/stable/c/ba353caafb06ccee57b78d3254e3cebf1dea4a93"
        },
        {
          "url": "https://git.kernel.org/stable/c/896a9512d0d83c2a4b357e5585b7b62a8e3f95c1"
        },
        {
          "url": "https://git.kernel.org/stable/c/7097a0280b178237265681be66d1bef11d15894b"
        },
        {
          "url": "https://git.kernel.org/stable/c/472aba2603ca74c4f7722cb0c0296942b0776b8d"
        },
        {
          "url": "https://git.kernel.org/stable/c/c6a13ae00dab3a1a8c7cf2f843f0fc9e8d4b0ccc"
        },
        {
          "url": "https://git.kernel.org/stable/c/92d3817649df2b0b6a008a686c8275c88d7ef594"
        }
      ],
      "title": "ila: reload IPv6 header after pskb_may_pull in checksum adjust",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-68127",
    "datePublished": "2026-08-10T11:58:48.489Z",
    "dateReserved": "2026-07-30T09:28:09.369Z",
    "dateUpdated": "2026-08-19T16:29:41.771Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-68127",
      "date": "2026-09-15",
      "epss": "0.00543",
      "percentile": "0.44067"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-68127\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-08-10T13:19:57.940\",\"lastModified\":\"2026-08-19T17:20:30.173\",\"vulnStatus\":\"Received\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nila: reload IPv6 header after pskb_may_pull in checksum adjust\\n\\nila_csum_adjust_transport() caches ip6h = ipv6_hdr(skb) before calling\\npskb_may_pull(). On a non-linear skb whose transport header sits in a page\\nfragment, pskb_may_pull() can call __pskb_pull_tail() / pskb_expand_head()\\nand free the old skb head, leaving ip6h dangling; the following\\nget_csum_diff(ip6h, p) then reads freed memory. ila_update_ipv6_locator()\\nuses ip6h (and the iaddr derived from it) again after the csum-adjust\\ncall and additionally writes the new locator through that pointer.\\n\\nImpact: a remote IPv6 packet routed through a configured ILA\\ncsum-adjust-transport route or receive-side mapping triggers a\\nslab-use-after-free in ila_update_ipv6_locator() (KASAN). The route or\\nmapping requires CAP_NET_ADMIN to configure, but trigger packets are\\nunauthenticated once it exists.\\n\\nReload ip6h after each pskb_may_pull() in ila_csum_adjust_transport()\\nbefore the csum-diff read. In ila_update_ipv6_locator() only the\\nILA_CSUM_ADJUST_TRANSPORT case pulls the skb, so reload ip6h and iaddr in\\nthat case alone before the destination-address write; the neutral-map\\nmodes never pull and keep their cached pointers.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"net/ipv6/ila/ila_common.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"33f11d16142b06588eedfc1dd8cf93790979a712\",\"lessThan\":\"e451a904606c571f731ef7a06b3398619dce5300\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33f11d16142b06588eedfc1dd8cf93790979a712\",\"lessThan\":\"1eadcb43893b897ade85ac5bf5c618054bc3c655\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33f11d16142b06588eedfc1dd8cf93790979a712\",\"lessThan\":\"ba353caafb06ccee57b78d3254e3cebf1dea4a93\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33f11d16142b06588eedfc1dd8cf93790979a712\",\"lessThan\":\"896a9512d0d83c2a4b357e5585b7b62a8e3f95c1\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33f11d16142b06588eedfc1dd8cf93790979a712\",\"lessThan\":\"7097a0280b178237265681be66d1bef11d15894b\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33f11d16142b06588eedfc1dd8cf93790979a712\",\"lessThan\":\"472aba2603ca74c4f7722cb0c0296942b0776b8d\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33f11d16142b06588eedfc1dd8cf93790979a712\",\"lessThan\":\"c6a13ae00dab3a1a8c7cf2f843f0fc9e8d4b0ccc\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"33f11d16142b06588eedfc1dd8cf93790979a712\",\"lessThan\":\"92d3817649df2b0b6a008a686c8275c88d7ef594\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"net/ipv6/ila/ila_common.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"4.5\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"4.5\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.265\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.216\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.183\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.148\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.101\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.42\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1.6\",\"lessThanOrEqual\":\"7.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/1eadcb43893b897ade85ac5bf5c618054bc3c655\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/472aba2603ca74c4f7722cb0c0296942b0776b8d\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/7097a0280b178237265681be66d1bef11d15894b\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/896a9512d0d83c2a4b357e5585b7b62a8e3f95c1\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/92d3817649df2b0b6a008a686c8275c88d7ef594\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/ba353caafb06ccee57b78d3254e3cebf1dea4a93\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/c6a13ae00dab3a1a8c7cf2f843f0fc9e8d4b0ccc\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/e451a904606c571f731ef7a06b3398619dce5300\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-08-31T11:16:43+00:00",
      "cve": "CVE-2026-68127",
      "id": "CVE-2026-68127",
      "initial_release_date": "2026-08-10T00:00:00+00:00",
      "product_status:known_affected": "139",
      "product_status:known_not_affected": "138",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: ila: reload IPv6 header after pskb_may_pull in checksum adjust",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68127.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-15T01:41:46Z",
      "cve": "CVE-2026-68127",
      "id": "CVE-2026-68127",
      "initial_release_date": "2026-08-17T16:29:54Z",
      "product_status:first_fixed": "65",
      "product_status:known_affected": "741",
      "product_status:known_not_affected": "6",
      "product_status:recommended": "42",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-68127",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-68127.json",
      "version": "7"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.