Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-97601

ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink

Description

In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink TUNSETLINK allows a TUN device to change its link-layer type to ARPHRD_IEEE802154 without initializing ieee802154_ptr. lowpan_newlink() checks only the device type before dereferencing the pointer, so an RTM_NEWLINK request can trigger a NULL pointer dereference. Reject devices without ieee802154_ptr along with devices of the wrong type.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 51e0e5d8124ece158927a4c2288c0929d3b53aa3 to < a1760f21c32adce41af5ed5687200865d8feaaebaffected
  • 51e0e5d8124ece158927a4c2288c0929d3b53aa3 to < 5063b9354e6e285dae61e530b30458498444a914affected
  • 51e0e5d8124ece158927a4c2288c0929d3b53aa3 to < 16d8e0b560d50cd1a9e6d77a9a154a94c4d6021eaffected
  • 51e0e5d8124ece158927a4c2288c0929d3b53aa3 to < 543994fa03c36a91d967a12c5c99cae74899504caffected
  • 51e0e5d8124ece158927a4c2288c0929d3b53aa3 to < 1c7710af7ad9532b534f1c134c11b04dbe4e0e0faffected
  • 51e0e5d8124ece158927a4c2288c0929d3b53aa3 to < 98ce5a42cde780ee0e40378607d4428c8fc12ec1affected
  • 51e0e5d8124ece158927a4c2288c0929d3b53aa3 to < 8528da2333ce05cf627f93425f9d05efb08b3146affected
  • 51e0e5d8124ece158927a4c2288c0929d3b53aa3 to < bf79662bc85e820ac3b846e2f347da29fbf6ac95affected

Linux Linux

Default version status: affected

  • 4.3affected
  • 0 to < 4.3unaffected
  • 5.10.271 to ≤ 5.10.*unaffected
  • 5.15.222 to ≤ 5.15.*unaffected
  • 6.1.189 to ≤ 6.1.*unaffected
  • 6.6.158 to ≤ 6.6.*unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2.7 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References