High 7.5Published May 6, 2026

CVE-2026-43101ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()

Updated under an hour ago (Oct 27, 2026, 2:40 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() We need to check __in6_dev_get() for possible NULL value, as suggested by Yiming Qian. Also add skb_dst_dev_rcu() instead of skb_dst_dev(), and two missing READ_ONCE(). Note that @dev can't be NULL.

CVSS: 7.5 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 21, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 before 34b8390ac0ba57004b90ea568ac06f50bf896a80; from 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 before f87aa5d1a7f56727a768757613a303b4245444a1; from 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 before 4198aab6f000b4febb18ea820fea20634dd789c7; from 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 before 3719c234fa94c37c955b1ecd3742ef280ec135e6; 9ee11f0fff205b4b3df9750bff5e94f97c71b6a0 builds before 4e65a8b8daa18d63255ec58964dd192c7fdd9f8b	CNA record
linux linux_kernel linux:linux_kernel	from 5.15 before 6.18.24; from 6.19 before 6.19.14; 7.0; 7.0; 7.0; 7.0; 7.0; 7.0; and 1 more ranges	NVD

References

References

https://git.kernel.org/stable/c/34b8390ac0ba57004b90ea568ac06f50bf896a80
https://git.kernel.org/stable/c/f87aa5d1a7f56727a768757613a303b4245444a1
https://git.kernel.org/stable/c/4198aab6f000b4febb18ea820fea20634dd789c7	patch
https://git.kernel.org/stable/c/3719c234fa94c37c955b1ecd3742ef280ec135e6	patch
https://git.kernel.org/stable/c/4e65a8b8daa18d63255ec58964dd192c7fdd9f8b	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.