Null Dereference Vulnerability in Linux Kernel Affecting Network Functionality

CVE-2026-64542

What is CVE-2026-64542?

A vulnerability exists in the Linux kernel's handling of IPv6 Neighbor Discovery. The function accept_untracked_na() incorrectly dereferences a pointer without performing a NULL check. This can lead to a system crash when the pointer is cleared by a concurrent process, allowing unprivileged users to exploit the vulnerability via a network namespace. A fix has been implemented to use a validated pointer instead of refetching it, enhancing the stability and security of IPv6 network operations.

References