SECUFOCUSNOW
Home›CVE index›CVE-2026-63870
Review reviewHigh

CVE-2026-63870

Linux

In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() The aoe driver (or similar) generates a non-IPv6 packet (e.g., ETH_P_AOE) and queues it for transmission via dev_queue_xmit() on a 6LoWPAN interface (configured by the user or test case). Since the packet is not IPv6, the 6LoWPAN header_ops->create function (lowpan_header_create or header_create) returns early without initializing the lowpan_addr_info structure in the skb headroom. In the transmit function (lowpan_xmit), the driver calls lowpan_header (or setup_...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.07.20
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: only accept IPv6 packets in lowpan_xmit() The aoe driver (or similar) generates a non-IPv6 packet (e.g., ETH_P_AOE) and queues it for transmission via dev_queue_xmit() on a 6LoWPAN interface (configured by the user or test case). Since the packet is not IPv6, the 6LoWPAN header_ops->create function (lowpan_header_create or header_create) returns early without initializing the lowpan_addr_info structure in the skb headroom. In the transmit function (lowpan_xmit), the driver calls lowpan_header (or setup_...

Affected product and versions

Product
Linux
Affected versions
>= 4dc315e267fe4a3c863fec21f26aa0a418c3f07a < af07fffbd53ddc3ec3c2a4ca914f27899fa89bca, >= 4dc315e267fe4a3c863fec21f26aa0a418c3f07a < 3150e6d3223dfc356308125cabf9c34169842d2a, >= 4dc315e267fe4a3c863fec21f26aa0a418c3f07a < 8da95cb6ad7d656c871e776a9c7b77e894d6d89c, >= 4dc315e267fe4a3c863fec21f26aa0a418c3f07a < 1a827b95e62b4cbe851ae7cc9c961cdfa769cca4, >= 4dc315e267fe4a3c863fec21f26aa0a418c3f07a < c1819c8defa235c7beda859bc185b1c429a55ecd, >= 4dc315e267fe4a3c863fec21f26aa0a418c3f07a < 285b0842f2e01c3edf805f1fd64da11d9b7f6b4c, >= 4dc315e267fe4a3c863fec21f26aa0a418c3f07a < 87172cc8dc49aaf54407a31edffb0232f8cb93ab, >= 4dc315e267fe4a3c863fec21f26aa0a418c3f07a < 3a5f3f7aff18bcc36a57839cf50cf0cc8de707f3, >= 4.0
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available