CVE Explorer

CVE-2026-53263

In the Linux kernel, the following vulnerability has been resolved: 6lowpan: fix off-by-one in multicast context address compression The second memcpy in lowpan_iphc_mcast_ctx_addr_compress() uses &data[1] as destination and &ipaddr->s6_addr[11] as source, but both should be offset by one: &data[2] and &ipaddr->s6_addr[12] respectively. This off-by-one has two consequences: 1. data[1] is overwritten with s6_addr[11], corrupting the RIID field in the compressed multicast address 2. data[5]

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:28aa3bd310dbe153425214025ef0e2d30a3d70d7c763d84b9b53de54d504e753

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/6lowpan/iphc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f24a58c72a45f4c109f3557a760cc4b60b7a6037","status":"affected","version":"5609c185f24dffca5f6a9c127106869da150be03","versionType":"git"},{"lessThan":"da8cbb64b47e9066b40af0de170901caf17b768c","status":"affected","version":"5609c185f24dffca5f6a9c127106869da150be03","versionType":"git"},{"lessThan":"4485d79617520d84ba5a14515e2b5136007d6deb","status":"affected","version":"5609c185f24dffca5f6a9c12710…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e518d1e67e447aa5260691d98b864bc8e0cbfa3770bfafe5baa0df15d0cfa067 · sha256:59993417102a2189… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/6lowpan/iphc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.6"},{"lessThan":"4.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessThanOrEq…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e518d1e67e447aa5260691d98b864bc8e0cbfa3770bfafe5baa0df15d0cfa067 · sha256:59993417102a2189… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e518d1e67e447aa5260691d98b864bc8e0cbfa3770bfafe5baa0df15d0cfa067 · sha256:59993417102a2189… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:e518d1e67e447aa5260691d98b864bc8e0cbfa3770bfafe5baa0df15d0cfa067 · sha256:59993417102a2189… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/06ce6fc106b16dec9b535950db626261be865e5b"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e518d1e67e447aa5260691d98b864bc8e0cbfa3770bfafe5baa0df15d0cfa067 · sha256:59993417102a2189… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/2a58899d11009bffc7b4b32a571858f381121837"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e518d1e67e447aa5260691d98b864bc8e0cbfa3770bfafe5baa0df15d0cfa067 · sha256:59993417102a2189… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/4485d79617520d84ba5a14515e2b5136007d6deb"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e518d1e67e447aa5260691d98b864bc8e0cbfa3770bfafe5baa0df15d0cfa067 · sha256:59993417102a2189… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/c32f30ef5e66adbfa102348e2e8a23776eb007cb"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e518d1e67e447aa5260691d98b864bc8e0cbfa3770bfafe5baa0df15d0cfa067 · sha256:59993417102a2189… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/da8808463882c3f3c357b072e25053c2121f1419"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e518d1e67e447aa5260691d98b864bc8e0cbfa3770bfafe5baa0df15d0cfa067 · sha256:59993417102a2189… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/da8cbb64b47e9066b40af0de170901caf17b768c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e518d1e67e447aa5260691d98b864bc8e0cbfa3770bfafe5baa0df15d0cfa067 · sha256:59993417102a2189… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/dcb1bec1c32ee5c3878354e087cf5dbee2b7c7af"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e518d1e67e447aa5260691d98b864bc8e0cbfa3770bfafe5baa0df15d0cfa067 · sha256:59993417102a2189… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/f24a58c72a45f4c109f3557a760cc4b60b7a6037"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:e518d1e67e447aa5260691d98b864bc8e0cbfa3770bfafe5baa0df15d0cfa067 · sha256:59993417102a2189… · /containers/cna/references/0

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer