← Back

CVE-2026-23442

nvd nist
Published: Apr 3, 2026Modified: Jun 1, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: add NULL checks for idev in SRv6 paths __in6_dev_get() can return NULL when the device has no IPv6 configuration (e.g. MTU < IPV6_MIN_MTU or after NETDEV_UNREGISTER). Add NULL checks for idev returned by __in6_dev_get() in both seg6_hmac_validate_skb() and ipv6_srh_rcv() to prevent potential NULL pointer dereferences.

Affected (10)

Products: Linux: Linux Kernel
1 product
Linux Kernel
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Linux
From 4.10.1 to 6.12.83
From 6.13 to 6.19.10
Version 4.10
Version 7.0 rc1
Version 7.0 rc2
Version 7.0 rc3
Version 7.0 rc4
Version 7.0 rc5
Version 7.0 rc6
Version 7.0 rc7

Timeline

No history available yet.