HIGHVulnerability

CVE-2026-64116

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() Reported by Sashiko: The function ipv6_hop_ioam() accesses __in6_dev_get(skb->dev)->cnf.ioam6_enabled without validating the returned idev pointer. Because addrconf_ifdown() can concurrently clear dev->ip6_ptr via RCU, __in6_dev_get() can return NULL during interface teardown, which could cause a NULL pointer dereference when processing an IOAM Hop-by-Hop option. Let's add a check and use SKB_DROP_REASON_IPV6DISABLED accordingly.

Properties

severity
HIGH
score
7.5
cve_id
CVE-2026-64116
vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
published_at
2026-07-19T16:17:53.103
last_modified
2026-08-12T15:50:06.733

Related Entities (7)

AFFECTS_PRODUCT (5)

[Product]
[Product]
[Product]
[Product]
[Product]

HAS_WEAKNESS (1)

[Weakness]NULL Pointer Dereference

DESCRIBED_BY (1)

[Source]NVD

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-64116 — Ninja Signal Threat Intelligence | Ninja Signal