What is CVE-2026-68121?
CVE-2026-68121 is a flaw in the Linux kernel's pppoe module where the PPPoE header pointer is not reloaded after dev_hard_header() call, potentially allowing reallocation of skb head and invalidating the pointer. Affected systems should apply the kernel updates.
Azərbaycanca: CVE-2026-68121 Linux kernel-də pppoe modulunda aşkarlanıb. dev_hard_header() çağırışından sonra pppoe_sendmsg() funksiyasında PPPoE header göstəricisi yenilənmədiyi üçün, skb başlığı yenidən ayrıldıqda pointer etibarsız olur. Təsirə məruz qalan sistemlərdə kernel yenilənməsi tətbiq edilməlidir.
Related CVEs
link basis: same weakness class CWE-416
FAQ2
Which module of the Linux kernel is affected by CVE-2026-68121?
CVE-2026-68121 affects the pppoe module in the Linux kernel.
What is the root cause of CVE-2026-68121?
The root cause is that the PPPoE header pointer is not reloaded after the dev_hard_header() call in pppoe_sendmsg(), which can invalidate the pointer when the skb head is reallocated.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.