CVE-2026-23293 — Access of Uninitialized Pointer in Linux
Severity
5.5MEDIUM
No vectorEPSS
0.0%
top 90.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMar 25
Description
In the Linux kernel, the following vulnerability has been resolved:
net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
When booting with the 'ipv6.disable=1' parameter, the nd_tbl is never
initialized because inet6_init() exits before ndisc_init() is called
which initializes it. If an IPv6 packet is injected into the interface,
route_shortcircuit() is called and a NULL pointer dereference happens on
neigh_lookup().
BUG: kernel NULL pointer dereference, address: 0000000000000380
Oop…
Affected Packages5 packages
▶CVEListV5linux/linuxe15a00aafa4b7953ad717d3cb1ad7acf4ff76945 — b5190fcd75a1f1785c766a8d1e44d3938e168f45+6
🔴Vulnerability Details
3OSV▶
CVE-2026-23293: In the Linux kernel, the following vulnerability has been resolved: net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled When booting with th↗2026-03-25
GHSA▶
GHSA-4mrh-9qq5-26w5: In the Linux kernel, the following vulnerability has been resolved:
net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled
When booting with↗2026-03-25
📋Vendor Advisories
4Debian▶
CVE-2026-23293: linux - In the Linux kernel, the following vulnerability has been resolved: net: vxlan:...↗2026