vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-97601

ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink

N/A
Published: September 25, 2026 at 10:22 AM UTC
Updated: October 19, 2026 at 10:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink TUNSETLINK allows a TUN device to change its link-layer type to ARPHRD_IEEE802154 without initializing ieee802154_ptr. lowpan_newlink() checks only the device type before dereferencing the pointer, so an RTM_NEWLINK request can trigger a NULL pointer dereference. Reject devices without ieee802154_ptr along with devices of the wrong type.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
4.351e0e5d8124ece158927a4c2288c0929d3b53aa3
Vendor states this is fixed in 16d8e0b560d50cd1a9e6d77a9a154a94c4d6021e (fixed)
Vendor states this is fixed in 1c7710af7ad9532b534f1c134c11b04dbe4e0e0f (fixed)
Vendor states this is fixed in 5063b9354e6e285dae61e530b30458498444a914 (fixed)
Vendor states this is fixed in 543994fa03c36a91d967a12c5c99cae74899504c (fixed)
Vendor states this is fixed in 8528da2333ce05cf627f93425f9d05efb08b3146 (fixed)
Vendor states this is fixed in 98ce5a42cde780ee0e40378607d4428c8fc12ec1 (fixed)
Vendor states this is fixed in a1760f21c32adce41af5ed5687200865d8feaaeb (fixed)
Vendor states this is fixed in bf79662bc85e820ac3b846e2f347da29fbf6ac95 (fixed)
Vendor states this is fixed in 4.3 (unaffected)
Vendor states this is fixed in 5.10.271 (unaffected)
Vendor states this is fixed in 5.15.222 (unaffected)
Vendor states this is fixed in 6.1.189 (unaffected)
Vendor states this is fixed in 6.12.111 (unaffected)
Vendor states this is fixed in 6.18.53 (unaffected)
Vendor states this is fixed in 6.6.158 (unaffected)
Vendor states this is fixed in 7.2.7 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc3 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/1c7710af7ad9532b534f1c134c11b04dbe4e0e0f
Source: cverecord
https://git.kernel.org/stable/c/98ce5a42cde780ee0e40378607d4428c8fc12ec1
Source: cverecord
https://git.kernel.org/stable/c/8528da2333ce05cf627f93425f9d05efb08b3146
Source: cverecord
https://git.kernel.org/stable/c/bf79662bc85e820ac3b846e2f347da29fbf6ac95
Source: cverecord
https://git.kernel.org/stable/c/a1760f21c32adce41af5ed5687200865d8feaaeb
Source: cverecord
https://git.kernel.org/stable/c/5063b9354e6e285dae61e530b30458498444a914
Source: cverecord
https://git.kernel.org/stable/c/16d8e0b560d50cd1a9e6d77a9a154a94c4d6021e
Source: cverecord
https://git.kernel.org/stable/c/543994fa03c36a91d967a12c5c99cae74899504c

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card