SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-80646

HIGH · CVSS 7.5 EPSS 0.51%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the IPv6 implementation, specifically in the `__in6_dev_stats_get()` function, where a potential NULL dereference can occur if `dev_get_by_index_rcu()` returns NULL due to the unregistration of the original physical device. This could lead to application crashes or unpredictable behavior, impacting system stability. System administrators and developers using affected Linux distributions should prioritize addressing this vulnerability to ensure robust network functionality and prevent potential service disruptions.

CVE
CVE-2026-80646
Severity
HIGH
CVSS
7.5
EPSS
0.51%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6_dev_stats_get() dev_get_by_index_rcu() could return NULL if the original physical device is unregistered. Found by Sashiko.