Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64542

In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in accept_untracked_na() accept_untracked_na() re-fetches the inet6_dev with __in6_dev_get(dev) and dereferences idev->cnf.accept_untracked_na without a NULL check, even though its only caller ndisc_recv_na() already fetched and NULL-checked idev for the same device. Both reads of dev->ip6_ptr run in the same RCU read-side critical section, but a concurrent addrconf_ifdown() can clear dev->ip6_ptr
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:da72fb009957f6c5def93c7ca4142d43144952ac73a94bbb62cde52467067288
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv6/ndisc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.0"},{"lessThan":"6.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.148","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.97","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.40","versionType":"semver"},{"lessThanOrEqual"…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:085a41723eed044d83a3cdfaf6fe1d7f3d6f2a5dd9636264d220917644c7c748 · sha256:2fde96957b05b60d… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv6/ndisc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"160d3f0d7a556ceae505dcab521a37057b4ce28f","status":"affected","version":"aaa5f515b16b6b3e137779ffb4c9558bb58c1e75","versionType":"git"},{"lessThan":"62c719203cb521b64fab74da94a81bdde5c18808","status":"affected","version":"aaa5f515b16b6b3e137779ffb4c9558bb58c1e75","versionType":"git"},{"lessThan":"a6450f7cfae57b382cbaf66a577765c9a88b3c58","status":"affected","version":"aaa5f515b16b6b3e137779ffb4c95…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:085a41723eed044d83a3cdfaf6fe1d7f3d6f2a5dd9636264d220917644c7c748 · sha256:2fde96957b05b60d… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv6/ndisc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.0"},{"lessThan":"6.0","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.148","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.97","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.40","versionType":"semver"},{"lessThanOrEqual"…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:085a41723eed044d83a3cdfaf6fe1d7f3d6f2a5dd9636264d220917644c7c748 · sha256:2fde96957b05b60d… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv6/ndisc.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"160d3f0d7a556ceae505dcab521a37057b4ce28f","status":"affected","version":"aaa5f515b16b6b3e137779ffb4c9558bb58c1e75","versionType":"git"},{"lessThan":"62c719203cb521b64fab74da94a81bdde5c18808","status":"affected","version":"aaa5f515b16b6b3e137779ffb4c9558bb58c1e75","versionType":"git"},{"lessThan":"a6450f7cfae57b382cbaf66a577765c9a88b3c58","status":"affected","version":"aaa5f515b16b6b3e137779ffb4c95…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:085a41723eed044d83a3cdfaf6fe1d7f3d6f2a5dd9636264d220917644c7c748 · sha256:2fde96957b05b60d… · /containers/cna/affected/0

Source references

5 source assertions
{"url":"https://git.kernel.org/stable/c/160d3f0d7a556ceae505dcab521a37057b4ce28f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:085a41723eed044d83a3cdfaf6fe1d7f3d6f2a5dd9636264d220917644c7c748 · sha256:2fde96957b05b60d… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/62c719203cb521b64fab74da94a81bdde5c18808"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:085a41723eed044d83a3cdfaf6fe1d7f3d6f2a5dd9636264d220917644c7c748 · sha256:2fde96957b05b60d… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/63d1c23764de2309cedbb779c75188d257a09d9b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:085a41723eed044d83a3cdfaf6fe1d7f3d6f2a5dd9636264d220917644c7c748 · sha256:2fde96957b05b60d… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/a6450f7cfae57b382cbaf66a577765c9a88b3c58"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:085a41723eed044d83a3cdfaf6fe1d7f3d6f2a5dd9636264d220917644c7c748 · sha256:2fde96957b05b60d… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/d186e942365acece7c56d39da05dd63bf95b280a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:085a41723eed044d83a3cdfaf6fe1d7f3d6f2a5dd9636264d220917644c7c748 · sha256:2fde96957b05b60d… · /containers/cna/references/4

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer