Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() l3mdev_master_dev_rcu() can return NULL when the slave device is being un-slaved from a VRF. All other callers deal with this, but we lost the fallback to loopback in ip6_rt_pcpu_alloc() -> ip6_rt_get_dev_rcu() with commit 4832c30d5458 ("net: ipv6: put host and anycast routes on device with address"). KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] RIP: 0010:ip6_rt_pcpu_alloc (net/ipv6/route.c:1418) Call Trace: ip6_pol_route (net/ipv6/route.c:2318) fib6_rule_lookup (net/ipv6/fib6_rules.c:115) ip6_route_output_flags (net/ipv6/route.c:2607) vrf_process_v6_outbound (drivers/net/vrf.c:437) I was tempted to rework the un-slaving code to clear the flag first and insert synchronize_rcu() before we remove the upper. But looks like the explicit fallback to loopback_dev is an established pattern. And I guess avoiding the synchronize_rcu() is nice, too.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-25 | 2 | Disclosure2 |
| 2026-03-31 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-23304 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23304 #CVE-2026-23304 #CVE #CyberSecurity #InfoSec https://t.co/gj8ganWtmQ
Post summary
The tweet merely flags the existence of CVE‑2026‑23304 with minimal context, offering no technical details, PoC, exploit, or patch information.
🚨*CVE* CVE-2026-23304 In the Linux kernel, the following vulnerability has been resolved: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() l3mdev_master_dev_rcu() can return NULL whe… https://www.cve.org/CVERecord?id=CVE-2026-23304 ----- Traducción: CVE-2026-23304 En … http://infoflow.cloud`
Post summary
The post announces the CVE-2026-23304 Linux kernel NULL pointer deref bug and notes it has been resolved, but provides no exploit details or patch specifics.
CVE-2026-23304 In the Linux kernel, the following vulnerability has been resolved: ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() l3mdev_master_dev_rcu() can return NULL whe… https://www.cve.org/CVERecord?id=CVE-2026-23304
Post summary
The post announces that CVE‑2026‑23304, a NULL pointer dereference in the Linux kernel’s IPv6 stack, has been resolved, providing a brief technical description but no exploit or patch information.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |