Vulnerability in Linux

CVE-2026-80646

In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6_dev_stats_get() dev_get_by_index_rcu() could return NULL if the original physical device is unregistered. Found by Sashiko.

EPSS: 0.002 (7.2th percentile) — read the EPSS interpretation.

Affected products

  • Linux — versions 5.2, a24963500a4ec921ce9c2597e0a584e44513afae

References