GHSA-r529-g827-7gf5HighCVSS 7.5

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix potential...

Published
May 6, 2026
Last Modified
October 30, 2026

🔗 CVE IDs covered (1)

CVE-2026-43101 →

📋 Description

In the Linux kernel, the following vulnerability has been resolved:

ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()

We need to check __in6_dev_get() for possible NULL value, as suggested by Yiming Qian.

Also add skb_dst_dev_rcu() instead of skb_dst_dev(), and two missing READ_ONCE().

Note that @dev can't be NULL.

🔗 References (8)