CVE-2026-43099

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43099
In the Linux kernel, the following vulnerability has been resolved: ipv4: icmp: fix null-ptr-deref in icmp_build_probe() ipv6_stub->ipv6_dev_find() may return ERR_PTR(-EAFNOSUPPORT) when the IPv6 stack is not active (CONFIG_IPV6=m and not loaded), and passing this error pointer to dev_hold() will cause a kernel crash with null-ptr-deref. Instead, silently discard the request. RFC 8335 does not appear to define a specific response for the case where an IPv6 interface identifier is syntactically valid but the implementation cannot perform the lookup at runtime, and silently dropping the request may safer than misreporting "No Such Interface".

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0f21bc261e60f0c696c58841c4873ff77ed83673
https://git.kernel.org/stable/c/47a8bf52156ac7e7a581eca31c1f964ba4258d4d Patch
https://git.kernel.org/stable/c/5b9911582d441f72fe6ccb15ffe3303bbc07f6f5 Patch
https://git.kernel.org/stable/c/6be325206850a0891896d38bcf83a09d8b54ec48 Patch
https://git.kernel.org/stable/c/dc5db4db19766a61ad65d81d1f55b1c1e51ba78d
https://git.kernel.org/stable/c/f91b3ed9e7fa82a70511b5f6901c88379acf2964 Patch
https://git.kernel.org/stable/c/fde29fd9349327acc50d19a0b5f3d5a6c964dfd8 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
History

01 Jun 2026, 17:17

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/0f21bc261e60f0c696c58841c4873ff77ed83673 -
  • () https://git.kernel.org/stable/c/dc5db4db19766a61ad65d81d1f55b1c1e51ba78d -

11 May 2026, 17:36

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/47a8bf52156ac7e7a581eca31c1f964ba4258d4d - () https://git.kernel.org/stable/c/47a8bf52156ac7e7a581eca31c1f964ba4258d4d - Patch
References () https://git.kernel.org/stable/c/5b9911582d441f72fe6ccb15ffe3303bbc07f6f5 - () https://git.kernel.org/stable/c/5b9911582d441f72fe6ccb15ffe3303bbc07f6f5 - Patch
References () https://git.kernel.org/stable/c/6be325206850a0891896d38bcf83a09d8b54ec48 - () https://git.kernel.org/stable/c/6be325206850a0891896d38bcf83a09d8b54ec48 - Patch
References () https://git.kernel.org/stable/c/f91b3ed9e7fa82a70511b5f6901c88379acf2964 - () https://git.kernel.org/stable/c/f91b3ed9e7fa82a70511b5f6901c88379acf2964 - Patch
References () https://git.kernel.org/stable/c/fde29fd9349327acc50d19a0b5f3d5a6c964dfd8 - () https://git.kernel.org/stable/c/fde29fd9349327acc50d19a0b5f3d5a6c964dfd8 - Patch
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
CWE CWE-476
First Time Linux linux Kernel
Linux

08 May 2026, 13:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.5

06 May 2026, 10:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-06 10:16

Updated : 2026-06-01 17:17

NVD link : CVE-2026-43099

Mitre link : CVE-2026-43099

CVE.ORG link : CVE-2026-43099

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-476

NULL Pointer Dereference