AZL-81843 CVE-2026-23442 affecting package kernel for versions less than 6.6.137.1-2

In the Linux kernel, the following vulnerability has been resolved: ipv6: add NULL checks for idev in SRv6 paths in6devget can return NULL when the device has no IPv6 configuration e.g. MTU IPV6MINMTU or after NETDEVUNREGISTER. Add NULL checks for idev returned by in6devget in both...

CVE-2026-23442 ipv6: add NULL checks for idev in SRv6 paths

In the Linux kernel, the following vulnerability has been resolved: ipv6: add NULL checks for idev in SRv6 paths in6devget can return NULL when the device has no IPv6 configuration e.g. MTU IPV6MINMTU or after NETDEVUNREGISTER. Add NULL checks for idev returned by in6devget in both...

EUVD-2025-2562

Malicious code in bioql PyPI...

CVE-2023-53343

CVE-2023-53343: Linux kernel vulnerability where icmp6_dev() dereferences ip6_null_entry->rt6i_idev, potentially enabling NULL pointer dereference when processing IPv6 Extension Headers (RPL/SRv6). Impact is local (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) with available mitigation by upgrading to ...

Linux Distros Unpatched Vulnerability : CVE-2022-48687

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix out-of-bounds read when setting HMAC data. The SRv6 layer allows defining HMA...

CVE-2025-21593

Summary (supported by provided documents): CVE-2025-21593 is an improper resource lifecycle control vulnerability in Juniper Junos OS and Junos OS Evolved dengan rpd, exploitable by an unauthenticated network attacker on devices with SRv6 enabled. The attacker can send malformed BGP UPDATE packet...

CVE-2025-21593 Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash

An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial-of-Service DoS. On devices with SRv6 Segment Routing over IPv6 enabled, an...

CVE-2025-21593 Junos OS and Junos OS Evolved: On SRv6 enabled devices, an attacker sending a malformed BGP update can cause the rpd to crash

An Improper Control of a Resource Through its Lifetime vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network-based attacker to cause a Denial-of-Service DoS. On devices with SRv6 Segment Routing over IPv6 enabled, an...

CVE-2022-48687

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix out-of-bounds read when setting HMAC data. The SRv6 layer allows defining HMAC data that can later be used to sign IPv6 Segment Routing Headers. This configuration is realised via netlink through four attributes:...

CVE-2022-48687

CVE-2022-48687 affects the Linux kernel SRv6 HMAC configuration. The vulnerability stems from the SECRETLEN length being decoupled from SECRET, allowing invalid combinations (e.g., secret="", secretlen=64) that an attacker can craft via netlink to trigger an out-of-bounds read of up to 64 bytes p...

CVE-2022-48687 ipv6: sr: fix out-of-bounds read when setting HMAC data.

In the Linux kernel, the following vulnerability has been resolved: ipv6: sr: fix out-of-bounds read when setting HMAC data. The SRv6 layer allows defining HMAC data that can later be used to sign IPv6 Segment Routing Headers. This configuration is realised via netlink through four attributes:...

CVE-2022-22228 Junos OS: IPv6 OAM SRv6 network-enabled devices are vulnerable to Denial of Service (DoS) due to RPD memory leak upon receipt of specific a IPv6 packet

An Improper Validation of Specified Type of Input vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS allows an attacker to cause an RPD memory leak leading to a Denial of Service DoS. This memory leak only occurs when the attacker's packets are destined to any configure...

GSD-2022-1004863 seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.289 by commit...

GSD-2022-1004695 seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.207 by commit...

GSD-2022-1004389 seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.56 by commit...

GSD-2022-1004172 seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors

seg6: fix skb checksum in SRv6 End.B6 and End.B6.Encaps behaviors This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.13 by commit...