What’s Vulnerable › Vulnerabilities

CVE-2026-22988: arp: do not assume dev_hard_header() does not change skb->head

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-01-23 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: arp: do not assume dev_hard_header() does not change skb->head arp_create() is the only dev_hard_header() caller making assumption about skb->head being unchanged. A recent commit broke this assumption. Initialize @arp pointer after dev_hard_header() call.

Affected products

• Linux kernel: from 6.12.64 before 6.12.66; from 6.18.4 before 6.18.6; 6.1.160, 6.6.120, 6.19-rc4 — fixed in 6.12.66, 6.18.6

How to fix

Upgrade to a fixed version: Linux kernel 6.12.66, 6.18.6. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/029935507d0af6553c45380fbf6feecf756fd226
• https://git.kernel.org/stable/c/393525dee5c39acff8d6705275d7fcaabcfb7f0a
• https://git.kernel.org/stable/c/70bddc16491ef4681f3569b3a2c80309a3edcdd1
• https://git.kernel.org/stable/c/949647e7771a4a01963fe953a96d81fba7acecf3
• https://git.kernel.org/stable/c/c92510f5e3f82ba11c95991824a41e59a9c5ed81
• https://git.kernel.org/stable/c/dd6ccec088adff4bdf33e2b2dd102df20a7128fa
• https://git.kernel.org/stable/c/e432dbff342b95fe44645f9a90fcf333c80f4b5e

Get alerted when CVE-2026-22988 or the next vulnerability affects your stack