CVE-2026-89561

CVE-2026-89561 is a NULL pointer dereference in the Linux kernel's IPv6 RPL (Routing Protocol for Low-Power and Lossy Networks) implementation. The function ipv6_rpl_srh_rcv() dereferences idev obtained from __in6_dev_get() without a NULL check when reading idev->cnf.rpl_seg_enabled. The race ...

CVE-2026-89561

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6rplsrhrcv ipv6rplsrhrcv dereferences idev from in6devget without a NULL check when reading idev-cnf.rplsegenabled. When the device's MTU drops below IPV6MINMTU, addrconfifdown clears...

CVE-2026-89561 ipv6: rpl: fix NULL dereference of idev in ipv6_rpl_srh_rcv()

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6rplsrhrcv ipv6rplsrhrcv dereferences idev from in6devget without a NULL check when reading idev-cnf.rplsegenabled. When the device's MTU drops below IPV6MINMTU, addrconfifdown clears...

CVE-2026-80976 seg6: reset IP6CB after IPv6 decapsulation

In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation decapandvalidate pulls the outer SRv6 headers and makes the inner packet the skb network header. The IPv6 control block still contains values collected while parsing the outer packet,...

CVE-2026-80976

CVE-2026-80976 is a Linux kernel vulnerability in the seg6 (SRv6) decapsulation path . After decap_and_validate() strips outer Segment Routing headers, the IPv6 control block (IP6CB) retains a stale nhoff offset from the outer packet. When the inner IPv6 packet is delivered via ip6_protocol_deliv...

CVE-2026-80976

In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation decapandvalidate pulls the outer SRv6 headers and makes the inner packet the skb network header. The IPv6 control block still contains values collected while parsing the outer packet,...

CVE-2026-80976 seg6: reset IP6CB after IPv6 decapsulation

In the Linux kernel, the following vulnerability has been resolved: seg6: reset IP6CB after IPv6 decapsulation decapandvalidate pulls the outer SRv6 headers and makes the inner packet the skb network header. The IPv6 control block still contains values collected while parsing the outer packet,...

CVE-2026-89561: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6rplsrhrcv ipv6rplsrhrcv dereferences idev from in6devget without a NULL check when reading idev-cnf.rplsegenabled. When the device's MTU drops below IPV6MINMTU, addrconfifdown clears...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107290)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107290 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ipv6: fix dst ref loops in rpl, seg6 and ioam6 lwtunnels Some lwtunnels have a dst cache for...

Linux Distros Unpatched Vulnerability : CVE-2026-45762

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5,...

AlmaLinux 9 : kernel (ALSA-2026:66180)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:66180 advisory. kernel: KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation CVE-2026-43133 kernel: ipv6: prevent possible UaF in addrconfpermanentaddr CVE-2026-43339...

PT-2026-90280

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description IPv4 and IPv6 input preserve an skb-sk association installed by the bpf sk assign function to allow local delivery to use the selected socket under RCU Read-Copy-Update. Both address...

PT-2026-90414

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where struct nfsd genl rqstp declares rq daddr and rq saddr as 16-byte struct sockaddr fields. When an IPv6 NFS client connects, the nfsd genl rpc...

PT-2026-90279

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description An issue exists in the ip6 tnl xmit function where the use of skb realloc headroom to expand headroom for outer IPv6 and optional encap headers can lead to a use-after-free scenario. The...

PT-2026-90277

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference occurs in the ipv6 rpl srh rcv function when it accesses the idev variable obtained from in6 dev get without a proper NULL check while reading idev-cnf.rpl seg...

PT-2026-96371

In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl: fix NULL dereference of idev in ipv6 rpl srh rcv ipv6 rpl srh rcv dereferences idev from in6 dev get without a NULL check when reading idev-cnf.rpl seg enabled. When the device's MTU drops below IPV6 MIN MTU, addrconf...

axios: Axios: Proxy bypass via IPv4-mapped IPv6 address non-normalization

A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not properly normalize IPv4-mapped IPv6 addresses. When a NOPROXY setting is configured to block direct access to specific IPv4 addresses, an attacker can bypass this restriction by using the...

netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation

A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended...

DEBIAN-CVE-2026-45762

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's IP defragmentation tracker lookup did not verify that an existing tracker used the same IP address family as the packet being...

EUVD-2026-75756

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, Suricata's IP defragmentation tracker lookup did not verify that an existing tracker used the same IP address family as the packet being...