In the Linux kernel, the following vulnerability has been resolved:

ipv6: guard against possible NULL deref in __in6_dev_stats_get()

dev_get_by_index_rcu() could return NULL if the original physical
device is unregistered.

Found by Sashiko.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f affected < a23f2c68c6635e41404f189f8f7ae910738cebdb
e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f affected < e14db43677946bf2095febd294bb3c13ab375ab7
e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f affected < 1a4adfbeb47a212a64539137411f1ca168474d33
e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f affected < 1e3db30a88815bae6e9d5db6f64ac735e615a07e
e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f affected < 952426a83ca75cea25c09d58944abafaa3ebd242
e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f affected < 0db1949084e85a72d174a7dea3259b94fe5a9305
e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f affected < fc920c0659cdea5afd8721c1155a51564859e075
e1ae5c2ea4783b1fd87be250f9fcc9d9e1a6ba3f affected < 507541c2a8eeb76c02bd2511958f73a8cfa3e1bc
a24963500a4ec921ce9c2597e0a584e44513afae affected —
4.19.291 affected < 4.20
Linux Linux affected
Version Status Constraints
5.2 affected —
0 unaffected < 5.2
5.10.261 unaffected ≤ 5.10.*
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0db1949084e85a72d174a7dea3259b94fe5a9305 cve-icon
https://git.kernel.org/stable/c/1a4adfbeb47a212a64539137411f1ca168474d33 cve-icon
https://git.kernel.org/stable/c/1e3db30a88815bae6e9d5db6f64ac735e615a07e cve-icon
https://git.kernel.org/stable/c/507541c2a8eeb76c02bd2511958f73a8cfa3e1bc cve-icon
https://git.kernel.org/stable/c/952426a83ca75cea25c09d58944abafaa3ebd242 cve-icon
https://git.kernel.org/stable/c/a23f2c68c6635e41404f189f8f7ae910738cebdb cve-icon
https://git.kernel.org/stable/c/e14db43677946bf2095febd294bb3c13ab375ab7 cve-icon
https://git.kernel.org/stable/c/fc920c0659cdea5afd8721c1155a51564859e075 cve-icon
History

Fri, 28 Aug 2026 07:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ipv6: guard against possible NULL deref in __in6_dev_stats_get() dev_get_by_index_rcu() could return NULL if the original physical device is unregistered. Found by Sashiko.
Title ipv6: guard against possible NULL deref in __in6_dev_stats_get()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-28T06:48:56.277Z

Reserved: 2026-08-26T14:34:25.779Z

Link: CVE-2026-80646

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.