In the Linux kernel, the following vulnerability has been resolved:
ipv6: add NULL checks for idev in SRv6 paths
__in6_dev_get() can return NULL when the device has no IPv6 configuration
(e.g. MTU < IPV6_MIN_MTU or after NETDEV_UNREGISTER).
Add NULL checks for idev returned by __in6_dev_get() in both
seg6_hmac_validate_skb() and ipv6_srh_rcv() to prevent potential NULL
pointer dereferences.
CVE-2026-23442
NONE
EPSS 0.01%
Updated Apr 07, 2026
Linux
CVE Details
CVE ID
CVE-2026-23442
Published Date
Apr 03, 2026
Vendor
Linux
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.01%
Likelihood of exploitation in next 30 days
Percentile:
2.2th percentile (higher than 2.2% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory