PT-2026-27746 · Linux · Linux Kernel

Published

2026-01-01

·

Updated

2026-04-23

·

CVE-2026-23381

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A flaw exists in the Linux kernel's bridge networking component. When the system boots with IPv6 disabled ('ipv6.disable=1'), the neighbor discovery table (nd tbl) is not initialized. Subsequently, if neighbor suppression is enabled and an ICMPv6 Neighbor Discovery packet is received by the bridge, a NULL pointer dereference occurs when attempting to access the uninitialized nd tbl via the neigh lookup() function. This can lead to a kernel panic. The issue arises from the use of IS ENABLED(IPV6) which is replaced with ipv6 mod enabled() in the callers to disable NS/NA suppression when IPv6 is disabled.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Weakness Enumeration

Related Identifiers

CVE-2026-23381
ECHO-2C32-4B71-8E59
OESA-2026-1862
OESA-2026-1863
OESA-2026-1864
OPENSUSE-SU-2026:20572-1
SUSE-SU-2026:1573-1
SUSE-SU-2026:1643-1
SUSE-SU-2026:1661-1
SUSE-SU-2026:21114-1
SUSE-SU-2026:21123-1
SUSE-SU-2026:21237-1
SUSE-SU-2026:21255-1
SUSE-SU-2026:21352-1
SUSE-SU-2026:21361-1

Affected Products

Linux Kernel