CVE-2026-23442

MediumCVSS 5.5/10Last modified Nov 5, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6: add NULL checks for idev in SRv6 paths

__in6_dev_get() can return NULL when the device has no IPv6 configuration (e.g. MTU < IPV6_MIN_MTU or after NETDEV_UNREGISTER).

Add NULL checks for idev returned by __in6_dev_get() in both seg6_hmac_validate_skb() and ipv6_srh_rcv() to prevent potential NULL pointer dereferences.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

VendorProductVersions
LinuxLinux>= 1ababeba4a21f3dba3da3523c670b207fb2feb62, < 0348fa0ada37cef7c6b5ab2a428bb2c6aee784e4; >= 1ababeba4a21f3dba3da3523c670b207fb2feb62, < 83d705d35e583cb1b1eacf196dfe7b77d442018e; >= 1ababeba4a21f3dba3da3523c670b207fb2feb62, < d1bd8b9edc6752d10f84d28ff64f842401ce336d; >= 1ababeba4a21f3dba3da3523c670b207fb2feb62, < 50352fc103928e10e8729abc79a0d05abef26c4d; >= 1ababeba4a21f3dba3da3523c670b207fb2feb62, < bc9843c39f9932a8b36efd1d362ea00bb88e4e78; >= 1ababeba4a21f3dba3da3523c670b207fb2feb62, < c5cedee5d97382176573bbe21e1724e737a5eb64; >= 1ababeba4a21f3dba3da3523c670b207fb2feb62, < a25853c9feea7bbf31d157ff6e004d2d3b4f7f13; >= 1ababeba4a21f3dba3da3523c670b207fb2feb62, < 06413793526251870e20402c39930804f14d59c0
LinuxLinux4.10
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< *

References

Timeline

Published
Apr 3, 2026
Last modified
Nov 5, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-234435.5In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix previous acpi_processor_errata_piix4() fix After CVE-2026-234445.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure CVE-2026-234455.5In the Linux kernel, the following vulnerability has been resolved: igc: fix page fault in XDP TX timestamps handling If an XDP applicatioCVE-2026-234465.5In the Linux kernel, the following vulnerability has been resolved: net: usb: aqc111: Do not perform PM inside suspend callback syzbot repCVE-2026-234477.8In the Linux kernel, the following vulnerability has been resolved: net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check The samCVE-2026-234487.8In the Linux kernel, the following vulnerability has been resolved: net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check cdc_ncmCVE-2026-234497.8In the Linux kernel, the following vulnerability has been resolved: net/sched: teql: Fix double-free in teql_master_xmit Whenever a TEQL dCVE-2026-23453.6Proctorio Chrome Extension is a browser extension used for online proctoring. The extension contains multiple window.addEventListener('messaCVE-2026-234509.8In the Linux kernel, the following vulnerability has been resolved: net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() SyzkaCVE-2026-234517.5In the Linux kernel, the following vulnerability has been resolved: bonding: prevent potential infinite loop in bond_header_parse() bond_hCVE-2026-234524.7In the Linux kernel, the following vulnerability has been resolved: PM: runtime: Fix a race condition related to device removal The followCVE-2026-234537.5In the Linux kernel, the following vulnerability has been resolved: net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mo
CVE-2026-23442: Medium severity, CVSS 5.5 | Vulnix