CVE-2026-68127: ila: reload IPv6 header after pskb_may_pull in checksum adjust

CSIRTS triage

What

IPv6 header is not reloaded after pskb_may_pull in the ila checksum adjust function, causing buffer access errors.

Who is affected

Systems with the ila module enabled or with IPv6 Lightweight Tunneling in use.

Urgency

Critical severity (CVSS 9.8) and not yet exploited; patch immediately.

Action

Update the Linux kernel to a version containing the ila checksum adjust reload fix.

AI-assisted analysis generated from the source advisory — verify against the original.

Details

Source

Microsoft Security Response Center (INTL · vendor-psirt · site)

Severity

critical — CVSS 9.8

Published

2026-08-11

Exploitation

Not in CISA KEV at last sync

Original advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68127

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

• Low exploitation riskCVE-2026-681270.48% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 40% of all EPSS-scored CVEs.

Referenced CVEs

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

• high[NEW] [high] Linux Kernel: Multiple vulnerabilitiescert-bund
• criticalCVE-2026-68127: In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header af…nvd

More from Microsoft Security Response Center

• highCVE-2026-70130: Microsoft Office Remote Code Execution Vulnerability2026-08-11
• highCVE-2026-70354: .NET Core Remote Code Execution Vulnerability2026-08-11
• highCVE-2026-68792: Microsoft Office Elevation of Privilege Vulnerability2026-08-11
• highCVE-2026-66807: Microsoft Office Graphics Component Remote Code Execution Vulnerability2026-08-11
• highCVE-2026-64909: Microsoft Office Remote Code Execution Vulnerability2026-08-11