In the Linux kernel, the following vulnerability has been resolved:
net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled
When booting with the 'ipv6.disable=1' parameter, the nd_tbl is never initialized because inet6_init() exits before ndisc_init() is called which initializes it. Then, if neigh_suppress is enabled and an ICMPv6 Neighbor Discovery packet reaches the bridge, br_do_suppress_nd() will dereference ipv6_stub->nd_tbl which is NULL, passing it to neigh_lookup(). This causes a kernel NULL pointer dereference.
BUG: kernel NULL pointer dereference, address: 0000000000000268 Oops: 0000 [#1] PREEMPT SMP NOPTI [...] RIP: 0010:neigh_lookup+0x16/0xe0 [...] Call Trace: <IRQ> ? neigh_lookup+0x16/0xe0 br_do_suppress_nd+0x160/0x290 [bridge] br_handle_frame_finish+0x500/0x620 [bridge] br_handle_frame+0x353/0x440 [bridge] __netif_receive_skb_core.constprop.0+0x298/0x1110 __netif_receive_skb_one_core+0x3d/0xa0 process_backlog+0xa0/0x140 __napi_poll+0x2c/0x170 net_rx_action+0x2c4/0x3a0 handle_softirqs+0xd0/0x270 do_softirq+0x3f/0x60
Fix this by replacing IS_ENABLED(IPV6) call with ipv6_mod_enabled() in the callers. This is in essence disabling NS/NA suppression when IPv6 is disabled.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-livepatch-5.10.253-252.1015Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.15.204-143.230Upgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.18-modules-extraUpgrade perf6.12-debuginfoUpgrade perf6.18-debuginfoUpgrade kernel-debuginfoUpgrade kernel6.12-debuginfoUpgrade kernel-modules-extraUpgrade kernel6.12-develUpgrade perfUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.18-libbpfUpgrade python3-perf6.12Upgrade perf6.18Upgrade kernel-libbpfUpgrade kernel6.18-libbpf-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-6.1.168-202.320Upgrade kernel6.12-headersUpgrade kernel6.12-toolsUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.12Upgrade kernel6.18-modules-extra-commonUpgrade bpftool6.12-debuginfoUpgrade kernel6.12-tools-develUpgrade python3-perfUpgrade kernel6.18Upgrade bpftool6.18Upgrade kernel-debuginfo-common-aarch64Upgrade kernel6.12-modules-extraUpgrade kernel-develUpgrade bpftool6.12Upgrade kernel-libbpf-develUpgrade kernel-livepatch-6.12.77-99.140Upgrade bpftool6.18-debuginfoUpgrade python3-perf6.18Upgrade python3-perf6.12-debuginfoUpgrade kernel-toolsUpgrade kernel6.12-libbpfUpgrade kernel6.18-debuginfoUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-toolsUpgrade kernel6.18-headersUpgrade kernel-libbpf-staticUpgrade kernel6.18-libbpf-staticUpgrade kernel6.18-libbpf-debuginfoUpgrade kernel6.18-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.12-libbpf-develUpgrade kernel-livepatch-6.18.20-20.229Upgrade kernel-libbpf-debuginfoUpgrade kernelUpgrade bpftoolUpgrade perf6.12Upgrade kernel6.18-develUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.12-libbpf-static | Apr 9, 2026 | Mar 25, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | May 3, 2026 | May 3, 2026 |
| Redhat_linux | — | Upgrade runcNo solution existsUpgrade runc-debugsourceUpgrade runc-debuginfo | Jul 17, 2026 | Mar 25, 2026 |
| Ubuntu | — | Upgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1058-oracleUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1030-nvidia-tegra-rtUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-6.8.0-1061-ibmUpgrade linux-image-ibm-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1064-gcpUpgrade linux-image-6.8.0-136-lowlatency-64kUpgrade linux-image-6.8.0-1061-aws-64kUpgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-laptop-23.10Upgrade linux-image-azure-fde-5.15Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-intelUpgrade linux-image-raspi-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-186-genericUpgrade linux-image-6.8.0-1059-nvidiaUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1061-aws-fipsUpgrade linux-image-nvidia-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azure-fips-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-generic-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-raspiUpgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1063-azure-fipsUpgrade linux-image-5.15.0-186-fipsUpgrade linux-image-6.8.0-1059-gke-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-kvm-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-136-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-64kUpgrade linux-image-gke-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-xilinxUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1061-raspiUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1058-oracle-64kUpgrade linux-image-generic-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.1-1056-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-fde-6.8Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1064-gcp-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1117-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-awsUpgrade linux-image-5.15.0-1112-awsUpgrade linux-image-6.8.0-1061-awsUpgrade linux-image-6.8.0-1059-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04Upgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1030-nvidia-tegraUpgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-136-lowlatencyUpgrade linux-image-6.8.0-1064-gcp-fipsUpgrade linux-image-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1059-nvidia-64kUpgrade linux-image-6.8.0-1046-gkeopUpgrade linux-image-aws-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcpUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-2050-raspi-realtimeUpgrade linux-image-6.8.0-1059-nvidia-lowlatencyUpgrade linux-image-6.8.0-1059-gkeUpgrade linux-image-6.8.0-1033-xilinxUpgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-5.15 | Jul 20, 2026 | Mar 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub