CVE-2026-80646

HighCVSS 7.5/10Last modified Oct 16, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6: guard against possible NULL deref in __in6_dev_stats_get()

dev_get_by_index_rcu() could return NULL if the original physical device is unregistered.

Found by Sashiko.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f, < a23f2c68c6635e41404f189f8f7ae910738cebdb; >= e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f, < e14db43677946bf2095febd294bb3c13ab375ab7; >= e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f, < 1a4adfbeb47a212a64539137411f1ca168474d33; >= e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f, < 1e3db30a88815bae6e9d5db6f64ac735e615a07e; >= e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f, < 952426a83ca75cea25c09d58944abafaa3ebd242; >= e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f, < 0db1949084e85a72d174a7dea3259b94fe5a9305; >= e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f, < fc920c0659cdea5afd8721c1155a51564859e075; >= e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f, < 507541c2a8eeb76c02bd2511958f73a8cfa3e1bc; a24963500a4ec921ce9c2597e0a584e44513afae; >= 4.19.291, < 4.20
LinuxLinux5.2

References

Timeline

Published
Aug 28, 2026
Last modified
Oct 16, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-80647In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix warning in poll cq direct mode CQs allocated by ib_allocCVE-2026-80648In the Linux kernel, the following vulnerability has been resolved: pinctrl: spacemit: fix NULL check in spacemit_pin_set_config spacemit_CVE-2026-806497.8In the Linux kernel, the following vulnerability has been resolved: firmware: arm_scmi: Fix OOB in scmi_power_name_get() scmi_power_name_gCVE-2026-80659.1An authentication bypass vulnerability in the firmware update endpoint of Hitachi Energy RTU500 end-of-life versions allows an unauthenticatCVE-2026-80650In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc2235_probe() handlesCVE-2026-80651In the Linux kernel, the following vulnerability has been resolved: crypto: ccp/sev-dev-tsm - bail out early when pdev->bus is NULL dsm_crCVE-2026-80652In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Treat zero-length cert chain as query for blob lengths WCVE-2026-806538.4In the Linux kernel, the following vulnerability has been resolved: scsi: hisi_sas: Add slave_destroy interface for v3 hw WARNING is triggCVE-2026-80654In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Shutdown and free rx mailbox channel A mbox rx channel isCVE-2026-80655In the Linux kernel, the following vulnerability has been resolved: soc: xilinx: Fix race condition in event registration The zynqmp_powerCVE-2026-806567.8In the Linux kernel, the following vulnerability has been resolved: hfsplus: Add a sanity check for btree node size Syzbot reported an uniCVE-2026-80657In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Guard management mailbox channel cleanup against NULL po
CVE-2026-80646: High severity, CVSS 7.5 | Vulnix