IM
IronMonkey Threat Research

CVE-2026-23442 MEDIUM

Published: 2026-04-03 | Last Modified: 2026-07-24 | Status: Modified

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: add NULL checks for idev in SRv6 paths __in6_dev_get() can return NULL when the device has no IPv6 configuration (e.g. MTU < IPV6_MIN_MTU or after NETDEV_UNREGISTER). Add NULL checks for idev returned by __in6_dev_get() in both seg6_hmac_validate_skb() and ipv6_srh_rcv() to prevent potential NULL pointer dereferences.

Additional Descriptions (1)

En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: ipv6: añadir comprobaciones de NULL para idev en las rutas SRv6 __in6_dev_get() puede devolver NULL cuando el dispositivo no tiene configuración IPv6 (p. ej., MTU < IPV6_MIN_MTU o después de NETDEV_UNREGISTER). Añadir comprobaciones de NULL para idev devuelto por __in6_dev_get() tanto en seg6_hmac_validate_skb() como en ipv6_srh_rcv() para prevenir posibles desreferencias de puntero NULL.

CVSS Metrics

Base Score: 5.5 (MEDIUM)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactNONE
Integrity ImpactNONE
Availability ImpactHIGH

Source: [email protected]

Type: Primary

Exploitability Score: 1.8

Impact Score: 3.6

Weaknesses

Source Type Description
[email protected] Primary
en CWE-476

Affected Products

Vendor Product Version Update Type
linux linux_kernel * <built-in method update of dict object at 0x7fd369d6f840> Operating System
linux linux_kernel * <built-in method update of dict object at 0x7fd36865cb40> Operating System
linux linux_kernel 4.10 <built-in method update of dict object at 0x7fd369407dc0> Operating System
linux linux_kernel 7.0 <built-in method update of dict object at 0x7fd369407a80> Operating System
linux linux_kernel 7.0 <built-in method update of dict object at 0x7fd369d6d640> Operating System
linux linux_kernel 7.0 <built-in method update of dict object at 0x7fd36865cf40> Operating System
linux linux_kernel 7.0 <built-in method update of dict object at 0x7fd36865d280> Operating System
linux linux_kernel 7.0 <built-in method update of dict object at 0x7fd384ab60c0> Operating System
linux linux_kernel 7.0 <built-in method update of dict object at 0x7fd36865d680> Operating System
linux linux_kernel 7.0 <built-in method update of dict object at 0x7fd369d6d480> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:4.10:-:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
Yes cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*

References