CVE-2026-64545

A flaw was found in the Linux kernel. The xdp_master_redirect() function, which handles network packet redirection, does not properly check for a null pointer. This oversight allows a local attacker to trigger a null pointer dereference by sending a specially crafted XDP (eXpress Data Path) packet during a specific window when a network device's master adjacency is being dropped. Successful exploitation leads to a kernel panic, effectively causing a Denial of Service (DoS) on the affected system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.