Out-of-Bounds Write Vulnerability in Linux Kernel Affecting IPv6 Processing

CVE-2026-89783

What is CVE-2026-89783?

A vulnerability in the Linux kernel's IPv6 processing component could lead to an out-of-bounds write when handling security path data. In certain conditions, the depth check in xfrm6_input_addr() erroneously allows an attempt to write beyond the allocated array, risking system stability. This flaw could potentially be exploited by sending specially crafted network packets, resulting in erratic behavior or crashes due to violation of array boundaries. Proper validation checks have been implemented to address this issue and enhance system reliability against such exploit attempts.

References