PT-2026-98541 · Linux · Linux Kernel

CVE-2026-97601

·

Published

2026-09-25

·

Updated

2026-09-25

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A NULL pointer dereference exists in the lowpan newlink() function. This occurs because TUNSETLINK allows a TUN device to change its link-layer type to ARPHRD IEEE802154 without initializing the ieee802154 ptr variable. Since the function only verifies the device type before dereferencing the pointer, an RTM NEWLINK request can trigger the crash.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-97601

Affected Products

Linux Kernel