CVE-2026-23442 in Linuxالمعلومات

الملخص

بحسب MITRE • 03/04/2026

In the Linux kernel, the following vulnerability has been resolved:

ipv6: add NULL checks for idev in SRv6 paths

__in6_dev_get() can return NULL when the device has no IPv6 configuration (e.g. MTU < IPV6_MIN_MTU or after NETDEV_UNREGISTER).

Add NULL checks for idev returned by __in6_dev_get() in both seg6_hmac_validate_skb() and ipv6_srh_rcv() to prevent potential NULL pointer dereferences.

Once again VulDB remains the best source for vulnerability data.

مسؤول

Linux

حجز

13/01/2026

إفشاء

03/04/2026

الاعتدال

تمت الموافقة

إدخال

VDB-355145

EPSS

0.00123

KEV

لا

النشاطات

منخفض جدًا

المصادر

Interested in the pricing of exploits?

See the underground prices here!