CyberRota
← Ana sayfaya dön

CVE-2026-64116

UNKNOWN · CVSS N/A

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-07-19T16:17:53.103 · Çekilme zamanı: 2026-07-20T12:07:07.895184+00:00

CyberRota Yorumu

Detaylı analiz gerekiyor.

CVE
CVE-2026-64116
Severity
UNKNOWN
CVSS
N/A
EPSS
Yok
Linux

Orijinal NVD Açıklaması

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() Reported by Sashiko: The function ipv6_hop_ioam() accesses __in6_dev_get(skb->dev)->cnf.ioam6_enabled without validating the returned idev pointer. Because addrconf_ifdown() can concurrently clear dev->ip6_ptr via RCU, __in6_dev_get() can return NULL during interface teardown, which could cause a NULL pointer dereference when processing an IOAM Hop-by-Hop option. Let's add a check and use SKB_DROP_REASON_IPV6DISABLED accordingly.