CVE-2026-43101: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()
In the Linux kernel, the following vulnerability has been resolved:
ipv6: ioam: fix potential NULL dereferences in ioam6filltracedata()
We need to check in6devget() for possible NULL value, as suggested by Yiming Qian.
Also add skbdstdevrcu() instead of skbdstdev(), and two missing READONCE().
Note that @dev can't be NULL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-nvidia-tegrato a version that resolves this vulnerability.Fixed in 6.8.0-1035.38 - Upgrade
Upgrade
ubuntu/linux-nvidiato a version that resolves this vulnerability.Fixed in 7.0.0-1006.6 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.19.14-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.2.12-1Fixed in 7.2.14-1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.191 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.160 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.114 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.24 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.19.14 - Compensating control
Update the IPv6 IOAM code in __ioam6_fill_trace_data() to check __in6_dev_get() for a possible NULL value, use skb_dst_dev_rcu() instead of skb_dst_dev(), and add the two missing READ_ONCE() calls.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43101?
CVE-2026-43101 has a medium severity level due to the potential for NULL dereferences affecting system stability.
How do I fix CVE-2026-43101?
To fix CVE-2026-43101, ensure you update to the latest version of the Linux kernel where the vulnerability has been patched.
What kind of systems are affected by CVE-2026-43101?
CVE-2026-43101 affects systems running the Linux kernel that utilize IPv6 and IOAM features.
What is the nature of the vulnerability in CVE-2026-43101?
CVE-2026-43101 involves potential NULL dereferences in the __ioam6_fill_trace_data() function.
Is there any workaround for CVE-2026-43101 before applying a patch?
Currently, there are no specific workarounds for CVE-2026-43101, and updating the kernel is the recommended solution.