CVE-2026-68127

A flaw was found in the Linux kernel's Identifier-Locator Addressing (ILA) subsystem. This vulnerability, a use-after-free, occurs during the processing of IPv6 packets when an ILA checksum adjustment transport route is configured. A remote attacker, after an administrator has configured the necessary route, can send unauthenticated, specially crafted IPv6 packets. This can lead to memory corruption, potentially causing a denial of service or allowing for arbitrary code execution.

This issue affects ILA (Identifier Locator Addressing) IPv6 checksum adjustment. Cached IPv6 header pointer is stale after pskb_may_pull() on non-linear skbs, causing UAF. Systems not using ILA are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.