CVE-2026-23304

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the ip6 rt get dev rcu() function. This happens because l3mdev master dev rcu() can return NULL when a slave device is being un-slaved from a Virtual Routing and Forwarding (VRF) instance. The issue stems from the loss of a fallback to the loopback device within the ip6 rt pcpu alloc() function. The execution flow leading to this state involves vrf process v6 outbound(), ip6 route output flags(), fib6 rule lookup(), and ip6 pol route().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.