Riskcovery

CVE-2026-43101

ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()

State
Published
Severity
7.5 High
Published
May 6, 2026
Updated
Oct 30, 2026
Reserved
May 1, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()

We need to check __in6_dev_get() for possible NULL value, as suggested by Yiming Qian.

Also add skb_dst_dev_rcu() instead of skb_dst_dev(), and two missing READ_ONCE().

Note that @dev can't be NULL.

Scores

CVSSScoreVectorSource
3.17.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 to before dd0d2827b3643ff307c766865f8e31eab5cbd1f5Affected
  • 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 to before 34b8390ac0ba57004b90ea568ac06f50bf896a80Affected
  • 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 to before f87aa5d1a7f56727a768757613a303b4245444a1Affected
  • 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 to before 4198aab6f000b4febb18ea820fea20634dd789c7Affected
  • 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 to before 3719c234fa94c37c955b1ecd3742ef280ec135e6Affected
  • 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 to before 4e65a8b8daa18d63255ec58964dd192c7fdd9f8bAffected
LinuxLinux
  • 5.15Affected
  • before 5.15Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.114 through 6.12.*Not affected
  • 6.18.24 through 6.18.*Not affected
  • 6.19.14 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.