IPv6 Source Routing Header Vulnerability in Linux Kernel

CVE-2026-43501

What is CVE-2026-43501?

A vulnerability exists in the Linux Kernel related to the IPv6 Source Routing Header (SRH), where improper validation during packet processing can lead to an out-of-bounds write. When decompressing an RFC 6554 SRH and swapping segments, the recompressed header may exceed the expected length, resulting in data corruption. This issue arises due to inadequate headroom management, which allows for overwriting memory beyond allocated boundaries. The vulnerability can be exploited through crafted IPv6 packets, potentially leading to system instability or execution of arbitrary code. A fix has been implemented to ensure sufficient headroom is maintained during the recompression process, thus preventing such security issues.

References