SECURITY ANNOUNCEMENT

CVE-2026-99064

23 October 2026

router_alert offsets when they follow CIPSO. cipso_len is the distance the first memmove() shifts those options. The later header move and network-header reset relocate the bytes and their offset base together.

Introduced

6.1089aa3619d141d6cfb6040a561aebb6d99d3e2285

Fixed releases

6.12.113b965977126a90e01825814c859ba4788691eddd3

6.18.572200fe1d6148b78e1b8f00f4b2bd47760015077f

7.2.116e49d611a9cfbaac927b8fa80ebd4f6b1f37ada0

7.36d25ffca055a77787c21a36b66c253f76239411b

View source announcement ↗