CVE-2026-68322

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL dereference occurs in the Reliable Datagram Sockets (RDS) implementation when the system is booted with the ipv6.disable=1 parameter. In this configuration, the inet6 addr lst is not initialized because the inet6 init() function exits before addrconf init() can be called. Consequently, attempting to bind an RDS socket to an IPv6 address triggers a system crash within the ipv6 chk addr and flags() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.