CVE-2026-74550

In the Linux kernel, the following vulnerability has been resolved: net: do not send ICMP/NDISC Redirects when peer allocation fails When inetgetpeerv4 or inetgetpeerv6 fails to allocate a peer entry under memory pressure or tree size caps, redirect handlers previously fell back to sending...

PT-2026-73002

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the system may send un-rate-limited ICMP/NDISC Redirect messages when peer allocation fails due to memory pressure or tree size caps. This occurs because the...

CVE-2026-64542

In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in acceptuntrackedna acceptuntrackedna re-fetches the inet6dev with in6devgetdev and dereferences idev-cnf.acceptuntrackedna without a NULL check, even though its only caller ndiscrecvna already fetche...

AZL-94044 CVE-2026-64542 affecting package kernel for versions less than 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in acceptuntrackedna acceptuntrackedna re-fetches the inet6dev with in6devgetdev and dereferences idev-cnf.acceptuntrackedna without a NULL check, even though its only caller ndiscrecvna already fetche...

CVE-2026-64542

Summary: CVE-2026-64542 in the Linux kernel fixes a NULL dereference in IPv6 neighbor discovery. The vulnerable path occurs in accept_untracked_na(), which re-fetches inet6_dev via __in6_dev_get(dev) and accesses idev->cnf.accept_untracked_na without a NULL check, despite ndisc_recv_na() havin...

CVE-2026-43040: Missing Initialization of Resource

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: ndisc: fix ndiscrauseropt to initialize nduseroptpadX fields to zero to prevent an info-leak When processing Router Advertisements with user options the kernel builds an RTMNEWNDUSEROPT netlink message. The nduseroptms...