Vulnerability in Linux

CVE-2026-64538

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). fib6_nh_mtu_change() re-fetches idev via __in6_dev_get(arg->dev) and dereferences idev->cnf.mtu6 without a NULL check…

Affected products

  • Linux — versions c0b220cf7d80eb8a36ae9f12cae6df4577a6814e, 5.3, 0

References