David Pinilla Caparros

**Name of the Vulnerable Software and Affected Versions** Linux kernel versions prior to 5.15.19-cloudflare-2022.2.1 **Description** The vulnerability is related to the `mld newpack()` function in the `net/ipv6/mcast.c` module of the Linux kernel's IPv6 implementation. It is caused by incorrect synchronization, which can lead to a denial of service. The issue arises from the use of an rcu-unsafe version of `ipv6 get lladdr()` after external locks were removed. This can result in a general protection fault and cause the machine to crash or stall. **Recommendations** To resolve the issue, update the Linux kernel to a version that includes the fix for the `ipv6: mcast: use rcu-safe version of ipv6 get lladdr()` vulnerability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.