Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2026-80646

ipv6: guard against possible NULL deref in __in6_dev_stats_get()

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6_dev_stats_get() dev_get_by_index_rcu() could return NULL if the original physical device is unregistered. Found by Sashiko.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f to < a23f2c68c6635e41404f189f8f7ae910738cebdbaffected
  • e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f to < e14db43677946bf2095febd294bb3c13ab375ab7affected
  • e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f to < 1a4adfbeb47a212a64539137411f1ca168474d33affected
  • e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f to < 1e3db30a88815bae6e9d5db6f64ac735e615a07eaffected
  • e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f to < 952426a83ca75cea25c09d58944abafaa3ebd242affected
  • e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f to < 0db1949084e85a72d174a7dea3259b94fe5a9305affected
  • e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f to < fc920c0659cdea5afd8721c1155a51564859e075affected
  • e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f to < 507541c2a8eeb76c02bd2511958f73a8cfa3e1bcaffected
  • a24963500a4ec921ce9c2597e0a584e44513afaeaffected
  • 4.19.291 to < 4.20affected

Linux Linux

Default version status: affected

  • 5.2affected
  • 0 to < 5.2unaffected
  • 5.10.261 to ≤ 5.10.*unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References