CVE-2026-64542

A flaw was found in the Linux kernel's IPv6 Neighbor Discovery (NDISC) component. An unprivileged user, operating within a network namespace, can trigger a null pointer dereference in the accept_untracked_na() function. This occurs due to a race condition where the inet6_dev structure is re-fetched without a null check, while another process concurrently clears the device's IPv6 pointer. Successful exploitation of this vulnerability leads to a kernel crash, resulting in a Denial of Service (DoS).

This Moderate impact flaw in the Linux kernel's IPv6 Neighbor Discovery (NDISC) protocol can lead to a kernel panic, resulting in a denial of service. An unprivileged local attacker can trigger this NULL pointer dereference within a network namespace, impacting system availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.