Linux Kernel Vulnerability in IPv6 Segmentation and Routing

CVE-2026-46099

What is CVE-2026-46099?

A significant vulnerability in the Linux kernel's handling of IPv6 segmentation and routing can lead to a use-after-free condition. This flaw originates from the interaction between seg6_input_core() and rpl_input() functions, where a 'NOREF' destination entry is set but not properly handled under concurrent high-priority task execution. A potential attacker could exploit this condition, leading to unauthorized access or system instability. The vulnerability has been addressed by ensuring that the destination entries are properly referenced before caching. Users and administrators are strongly advised to update their systems to mitigate any risks associated with this issue.

References