CVE-2026-64542

In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in acceptuntrackedna acceptuntrackedna re-fetches the inet6dev with in6devgetdev and dereferences idev-cnf.acceptuntrackedna without a NULL check, even though its only caller ndiscrecvna already fetche...

CVE-2026-64542 ipv6: ndisc: fix NULL deref in accept_untracked_na()

In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in acceptuntrackedna acceptuntrackedna re-fetches the inet6dev with in6devgetdev and dereferences idev-cnf.acceptuntrackedna without a NULL check, even though its only caller ndiscrecvna already fetche...

CVE-2026-64542

In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in acceptuntrackedna acceptuntrackedna re-fetches the inet6dev with in6devgetdev and dereferences idev-cnf.acceptuntrackedna without a NULL check, even though its only caller ndiscrecvna already fetche...

CVE-2026-64542

Summary: CVE-2026-64542 in the Linux kernel fixes a NULL dereference in IPv6 neighbor discovery. The vulnerable path occurs in accept_untracked_na(), which re-fetches inet6_dev via __in6_dev_get(dev) and accesses idev->cnf.accept_untracked_na without a NULL check, despite ndisc_recv_na() havin...

EUVD-2026-49593

In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in acceptuntrackedna acceptuntrackedna re-fetches the inet6dev with in6devgetdev and dereferences idev-cnf.acceptuntrackedna without a NULL check, even though its only caller ndiscrecvna already fetche...

PT-2026-65217

In the Linux kernel, the following vulnerability has been resolved: ipv6: ndisc: fix NULL deref in accept untracked na accept untracked na re-fetches the inet6 dev with in6 dev getdev and dereferences idev-cnf.accept untracked na without a NULL check, even though its only caller ndisc recv na...