Description

In the Linux kernel, the following vulnerability has been resolved: arp: do not assume dev_hard_header() does not change skb->head arp_create() is the only dev_hard_header() caller making assumption about skb->head being unchanged. A recent commit broke this assumption. Initialize @arp pointer after dev_hard_header() call.

INFO

Published Date :

2026-01-23T15:24:09.756Z

Last Modified :

2026-02-09T08:36:38.938Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2026-22988 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-22988.

URL Resource
https://git.kernel.org/stable/c/029935507d0af6553c45380fbf6feecf756fd226 cve-icon cve-icon
https://git.kernel.org/stable/c/393525dee5c39acff8d6705275d7fcaabcfb7f0a cve-icon cve-icon
https://git.kernel.org/stable/c/70bddc16491ef4681f3569b3a2c80309a3edcdd1 cve-icon cve-icon
https://git.kernel.org/stable/c/949647e7771a4a01963fe953a96d81fba7acecf3 cve-icon cve-icon
https://git.kernel.org/stable/c/c92510f5e3f82ba11c95991824a41e59a9c5ed81 cve-icon cve-icon
https://git.kernel.org/stable/c/dd6ccec088adff4bdf33e2b2dd102df20a7128fa cve-icon cve-icon
https://git.kernel.org/stable/c/e432dbff342b95fe44645f9a90fcf333c80f4b5e cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2026012350-CVE-2026-22988-1ee5@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-22988 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-22988 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact