SECURITY ANNOUNCEMENT

CVE-2026-99041

23 October 2026

ip6_tnl_xmit() then propagates the underlay PMTU to the overlay route. Remove the stale ERSPAN copy and its now-unused dst variable. This eliminates the metadata-dst dereference and keeps ERSPAN aligned with

Introduced

4.165a963eb61b7c39e6c422b6e48619d19d04719358

Fixed releases

6.12.114f5b143f4cd3fb7673df8d727550478a4b762908a

6.18.582d06cb25a497d3a7034ef9d172626c2d6620a0f1

6.6.160b14a682ad7d45345701e08f9279d483a1da8b36c

7.2.118f27260b989f488760289276377db24fbfb20bfa

7.38bc60db48e8cba35488bbd6e1f94aa990afa275a

View source announcement ↗