CVE-2026-23442

Aliases:UBUNTU-CVE-2026-23442DEBIAN-CVE-2026-23442CGA-2pf2-r4wh-w2vjCGA-2w8v-2rj4-4crgCGA-4f26-5m88-5mm3CGA-5h2c-6896-fmm7CGA-7m62-5cjv-mmhfCGA-cm7j-qrcr-9g88CGA-f5xr-52h6-wgmfCGA-fhxm-5mhp-6r7fCGA-gjm6-v4wv-x3q9CGA-hfj9-5w7c-wx25CGA-hp8m-92jq-qh8cCGA-hq78-hxrj-4jjjCGA-hwq3-h3p9-f3jvCGA-m992-jf47-262xCGA-r95p-5h3m-gqgpCGA-wr6j-86jf-m7r4CGA-4fw3-h3xf-cj78CGA-8hw4-759v-pg59CGA-2428-5cm7-86q9CGA-2x9q-4q27-qgg2CGA-3cpc-5973-9424CGA-3vvq-8jrp-m643CGA-3xhp-mf83-pwqgCGA-4g67-94xw-5r4vCGA-4g8x-5hrg-93r6CGA-4mrj-5m2g-2wxwCGA-4r5v-wg53-9hq6CGA-5g96-r58v-v3hvCGA-5jqq-xqq5-6fv7CGA-5pq3-7447-jg8qCGA-6j2j-vpww-7h47CGA-6mc8-c792-7h4xCGA-73hw-p3jc-3q3gCGA-8r68-hv8w-j56gCGA-8rrw-pp2r-pqw8CGA-9c2r-v626-rxm8CGA-9f9q-w424-9fcrCGA-9g42-4rc5-xw4fCGA-9mcw-4g4r-2whcCGA-cfgf-5346-gf39CGA-cx53-h7qg-m6gvCGA-ff4v-38j6-xm5mCGA-gp88-p37v-chg4CGA-hq57-2rq5-8h3mCGA-hwcp-75mj-6jxwCGA-jqmx-jg6p-5fjjCGA-mmh6-qr4h-rq4jCGA-qjx6-jh5r-q8hpCGA-r89p-p92h-cv34CGA-rfqf-x6fq-fr8gCGA-rjw8-9pmp-rw2fCGA-rmmg-qmh3-r4xgCGA-rvv6-7qm5-9fx8CGA-rxv4-m5j2-rg53CGA-vg86-hqvr-q6fpCGA-vh4m-rxh7-9fx6CGA-vrgv-h5m2-vp55CGA-vv3c-92qc-m237CGA-w4cx-w5h4-cxjmCGA-w8f4-m2mh-88w8CGA-wq5g-5j6q-mrvpCGA-x2cg-m8gq-g324CGA-x6f4-9pf9-qvxhCGA-xh5p-82hh-phgwCGA-xx3f-r7q3-wc6gCGA-h64f-xjvx-69jr
Advisory lineage Upstream: 0 Downstream: 19
Modified
Published: 03 Apr 2026, 15:15
Last modified:01 Jun 2026, 16:11

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.12% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

03 Apr 2026, 15:15
Published
Vulnerability first disclosed
01 Jun 2026, 16:11
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: add NULL checks for idev in SRv6 paths __in6_dev_get() can return NULL when the device has no IPv6 configuration (e.g. MTU < IPV6_MIN_MTU or after NETDEV_UNREGISTER). Add NULL checks for idev returned by __in6_dev_get() in both seg6_hmac_validate_skb() and ipv6_srh_rcv() to prevent potential NULL pointer dereferences.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.12%• Percentile: 2%

Techniques & Countermeasures

  • CWE-476•NULL Pointer Dereference

    The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

  • chainguard•hyperv-daemons-6.18

    all

  • chainguard•linux-aws-6.12

    < 6.12.85-r0

  • chainguard•linux-aws-6.18

    all

  • chainguard•linux-aws-6.18-boot-installed

    all

  • chainguard•linux-aws-6.18-bootc

    all

  • chainguard•linux-aws-6.18-bootc-boot-installed

    all

  • chainguard•linux-aws-6.18-fips-boot-installed

    all

  • chainguard•linux-aws-6.18-headers

    all

  • chainguard•linux-aws-6.18-modules

    all

  • chainguard•linux-azure-6.12

    < 6.12.85-r0

  • chainguard•linux-azure-6.18

    all

  • chainguard•linux-azure-6.18-boot-installed

    all

  • chainguard•linux-azure-6.18-fips-boot-installed

    all

  • chainguard•linux-azure-6.18-headers

    all

  • chainguard•linux-azure-6.18-modules

    all

  • chainguard•linux-desktop-6.18

    all

  • chainguard•linux-desktop-6.18-bootc

    all

  • chainguard•linux-desktop-6.18-bootc-boot-installed

    all

  • chainguard•linux-desktop-6.18-headers

    all

  • chainguard•linux-desktop-6.18-modules

    all

  • chainguard•linux-firecracker-6.18

    all

  • chainguard•linux-gcp-6.12

    < 6.12.85-r0

  • chainguard•linux-gcp-6.18

    < 6.18.31-r0

  • chainguard•linux-gcp-6.18-bootc

    < 6.18.31-r0

  • chainguard•linux-gcp-6.18-bootc-boot-installed

    < 6.18.38-r2

  • chainguard•linux-qemu-6.12

    < 6.12.85-r0

  • chainguard•linux-qemu-6.18

    < 6.18.31-r0

  • chainguard•linux-qemu-6.18-bootc

    < 6.18.31-r0

  • chainguard•linux-qemu-6.18-bootc-boot-installed

    < 6.18.38-r2

  • chainguard•linux-qemu-melange

    < 0

  • chainguard•linux-vmware-6.12

    < 6.12.85-r0

  • chainguard•linux-vmware-6.18

    all

  • chainguard•linux-vmware-6.18-boot-installed

    all

  • chainguard•linux-vmware-6.18-fips-boot-installed

    all

  • chainguard•linux-vmware-6.18-headers

    all

  • chainguard•linux-vmware-6.18-modules

    all

  • debian•linux

    < 5.10.259-1 | < 6.1.176-1 | < 6.12.85-1 | < 6.19.10-1

  • debian•linux-6.1

    < 6.1.176-1~deb11u1

  • ubuntu•linux

    all | < 5.15.0-186.196 | < 6.8.0-136.136 | all

  • ubuntu•linux-allwinner-5.19

    all

  • ubuntu•linux-aws

    all | < 5.15.0-1112.119 | < 6.8.0-1061.64 | all

  • ubuntu•linux-aws-5.0

    all

  • ubuntu•linux-aws-5.11

    all

  • ubuntu•linux-aws-5.13

    all

  • ubuntu•linux-aws-5.15

    < 5.15.0-1112.119~20.04.1

  • ubuntu•linux-aws-5.19

    all

  • ubuntu•linux-aws-5.3

    all

  • ubuntu•linux-aws-5.4

    all

  • ubuntu•linux-aws-5.8

    all

  • ubuntu•linux-aws-6.14

    all

Showing first 50 affected entries in server-rendered view.

References (38)