PT-2026-30137 · Linux · Linux

Published

2026-04-03

·

Updated

2026-04-03

·

CVE-2026-23442

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
ipv6: add NULL checks for idev in SRv6 paths
in6 dev get() can return NULL when the device has no IPv6 configuration (e.g. MTU < IPV6 MIN MTU or after NETDEV UNREGISTER).
Add NULL checks for idev returned by in6 dev get() in both seg6 hmac validate skb() and ipv6 srh rcv() to prevent potential NULL pointer dereferences.

Related Identifiers

CVE-2026-23442

Affected Products

Linux