In the Linux kernel, the following vulnerability has been resolved:
net, neigh: Fix null-ptr-deref in neigh_table_clear()
When IPv6 module gets initialized but hits an error in the middle, kenel panic with:
KASAN: null-ptr-deref in range [0x0000000000000598-0x000000000000059f] CPU: 1 PID: 361 Comm: insmod Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) RIP: 0010:__neigh_ifdown.isra.0+0x24b/0x370 RSP: 0018:ffff888012677908 EFLAGS: 00000202 ... Call Trace: <TASK> neigh_table_clear+0x94/0x2d0 ndisc_cleanup+0x27/0x40 [ipv6] inet6_init+0x21c/0x2cb [ipv6] do_one_initcall+0xd3/0x4d0 do_init_module+0x1ae/0x670 ... Kernel panic - not syncing: Fatal exception
When ipv6 initialization fails, it will try to cleanup and calls:
neigh_table_clear() neigh_ifdown(tbl, NULL) pneigh_queue_purge(&tbl->proxy_queue, dev_net(dev == NULL)) # dev_net(NULL) triggers null-ptr-deref.
Fix it by passing NULL to pneigh_queue_purge() in neigh_ifdown() if dev is NULL, to make kernel not panic immediately.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernelUpgrade bpftoolUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade perf-debuginfoUpgrade perfUpgrade kernel-livepatch-4.14.299-223.520Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.79-51.138Upgrade kernel-headersUpgrade kernel-livepatch-5.10.155-138.670Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-tools-devel | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Oct 24, 2025 | Oct 23, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade linux-fipsUpgrade linux-gcp-4.15Upgrade linux-raspi-5.4Upgrade linux-lowlatency-hwe-5.15Upgrade linux-hweUpgrade linux-gcp-5.15Upgrade linux-gcp-5.4Upgrade linux-hwe-5.4Upgrade linux-azure-5.4Upgrade linux-gcp-fipsUpgrade linux-gcpUpgrade linux-realtimeUpgrade linux-awsUpgrade linux-intel-iotgUpgrade linux-bluefieldUpgrade linux-azure-4.15Upgrade linux-kvmUpgrade linux-riscv-5.15Upgrade linux-aws-hweUpgrade linux-aws-5.4Upgrade linux-lowlatencyUpgrade linux-gkeopUpgrade linux-intel-iotg-5.15Upgrade linux-ibm-5.4Upgrade linux-azure-5.15Upgrade linuxUpgrade linux-azure-fipsUpgrade linux-oracleUpgrade linux-nvidiaUpgrade linux-oracle-5.4Upgrade linux-iotUpgrade linux-oracle-5.15Upgrade linux-gkeUpgrade linux-hwe-5.15Upgrade linux-aws-fipsUpgrade linux-azureUpgrade linux-aws-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-raspiUpgrade linux-ibm | May 6, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub