CVE-2026-53012

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs when an IPv6 nexthop is replaced with an IPv4 nexthop. This happens because the has v4 flag of all groups containing the nexthop is not updated, as the nh group v4 update() function is not called during the transition from AF INET6 to AF INET. Consequently, a stale has v4=false value allows the system to bypass fib6 check nexthop, attaching IPv6 routes to groups containing only AF INET members. When subsequent route lookups call nexthop fib6 nh(), it returns NULL for the AF INET member, resulting in a system panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.