CVE-2026-43339: ipv6: prevent possible UaF in addrconf_permanent_addr()
In the Linux kernel, the following vulnerability has been resolved:
ipv6: prevent possible UaF in addrconfpermanentaddr()
The mentioned helper try to warn the user about an exceptional condition, but the message is delivered too late, accessing the ipv6 after its possible deletion.
Reorder the statement to avoid the possible UaF; while at it, place the warning outside the idev->lock as it needs no protection.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43339?
CVE-2026-43339 has a medium severity level due to its potential for use-after-free vulnerabilities.
How do I fix CVE-2026-43339?
To mitigate CVE-2026-43339, update to the latest version of the Linux kernel that addresses this vulnerability.
What products are affected by CVE-2026-43339?
CVE-2026-43339 affects the Linux kernel versions prior to the patch addressing the issue.
What is the impact of CVE-2026-43339?
The impact of CVE-2026-43339 could allow remote attackers to execute arbitrary code or cause a denial of service.
Who is the vendor associated with CVE-2026-43339?
The vendor associated with CVE-2026-43339 is the Linux community responsible for the Linux kernel.