CVE-2026-43101: ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data()
In the Linux kernel, the following vulnerability has been resolved:
ipv6: ioam: fix potential NULL dereferences in ioam6filltracedata()
We need to check in6devget() for possible NULL value, as suggested by Yiming Qian.
Also add skbdstdevrcu() instead of skbdstdev(), and two missing READONCE().
Note that @dev can't be NULL.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43101?
CVE-2026-43101 has a medium severity level due to the potential for NULL dereferences affecting system stability.
How do I fix CVE-2026-43101?
To fix CVE-2026-43101, ensure you update to the latest version of the Linux kernel where the vulnerability has been patched.
What kind of systems are affected by CVE-2026-43101?
CVE-2026-43101 affects systems running the Linux kernel that utilize IPv6 and IOAM features.
What is the nature of the vulnerability in CVE-2026-43101?
CVE-2026-43101 involves potential NULL dereferences in the __ioam6_fill_trace_data() function.
Is there any workaround for CVE-2026-43101 before applying a patch?
Currently, there are no specific workarounds for CVE-2026-43101, and updating the kernel is the recommended solution.