In the Linux kernel, the following vulnerability has been resolved:
net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
When booting with the 'ipv6.disable=1' parameter, the nd_tbl is never initialized because inet6_init() exits before ndisc_init() is called which initializes it. Then, if neigh_suppress is enabled and an ICMPv6 Neighbor Discovery packet reaches the bridge, br_do_suppress_nd() will dereference ipv6_stub->nd_tbl which is NULL, passing it to neigh_lookup(). This causes a kernel NULL pointer dereference.
BUG: kernel NULL pointer dereference, address: 0000000000000268 Oops: 0000 [#1] PREEMPT SMP NOPTI [...] RIP: 0010:neigh_lookup+0x16/0xe0 [...] Call Trace: <IRQ> ? neigh_lookup+0x16/0xe0 br_do_suppress_nd+0x160/0x290 [bridge] br_handle_frame_finish+0x500/0x620 [bridge] br_handle_frame+0x353/0x440 [bridge] __netif_receive_skb_core.constprop.0+0x298/0x1110 __netif_receive_skb_one_core+0x3d/0xa0 process_backlog+0xa0/0x140 __napi_poll+0x2c/0x170 net_rx_action+0x2c4/0x3a0 handle_softirqs+0xd0/0x270 do_softirq+0x3f/0x60
Fix this by replacing IS_ENABLED(IPV6) call with ipv6_mod_enabled() in the callers. This is in essence disabling NS/NA suppression when IPv6 is disabled.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.10.253-252.1015Upgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-livepatch-5.15.204-143.230Upgrade kernel-develUpgrade python-perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-tools-develUpgrade python3-perfUpgrade bpftool-debuginfoUpgrade kernel6.12-headersUpgrade python3-perf6.12Upgrade kernel6.12Upgrade kernel6.12-debuginfoUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.18-modules-extra-commonUpgrade perf6.12-debuginfoUpgrade perf6.18Upgrade perf6.18-debuginfoUpgrade kernel6.12-develUpgrade kernel6.18-modules-extraUpgrade bpftool6.18Upgrade kernel-modules-extraUpgrade perfUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel6.18Upgrade kernel-debuginfoUpgrade bpftool6.12-debuginfoUpgrade kernel6.18-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.12-toolsUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.18-libbpf-develUpgrade kernel-livepatch-6.1.168-202.320Upgrade kernel-tools-debuginfoUpgrade kernel6.18-debuginfo-common-x86_64Upgrade python3-perf6.18Upgrade bpftool6.12Upgrade bpftoolUpgrade perf6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel6.18-headersUpgrade kernel6.12-tools-debuginfoUpgrade kernel-livepatch-6.12.77-99.140Upgrade bpftool6.18-debuginfoUpgrade kernel-toolsUpgrade kernel6.18-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.18-tools-develUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18-develUpgrade kernel-libbpf-staticUpgrade kernel6.18-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel6.18-debuginfoUpgrade kernel6.12-libbpfUpgrade kernel6.18-libbpf-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernelUpgrade kernel-livepatch-6.18.20-20.229Upgrade kernel-libbpf-debuginfoUpgrade python3-perf6.18-debuginfoUpgrade kernel6.12-libbpf-static | Apr 9, 2026 | Mar 25, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 3, 2026 | May 3, 2026 |
| Redhat_linux | — | Upgrade runc-debuginfoNo solution existsUpgrade runc-debugsourceUpgrade runc | Jul 17, 2026 | Mar 25, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-fips-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-azure-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-virtualUpgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-5.15Upgrade linux-image-genericUpgrade linux-image-azure-fde-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-xilinxUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-aws-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-fipsUpgrade linux-image-oracleUpgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-azure-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-aws-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-azure-fde-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-5.15Upgrade linux-image-azureUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-nvidia-tegraUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-intelUpgrade linux-image-lowlatency-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-laptop-23.10Upgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-136-fipsUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-virtual-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-6.8.0-1061-aws-fips | Jul 20, 2026 | Mar 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub