Linux Kernel SRv6 NULL Pointer Dereference Vulnerability

A vulnerability in the Linux kernel's handling of Segment Routing over IPv6 (SRv6) can lead to NULL pointer dereferences. This issue arises because the function '__in6_dev_get()' may return NULL when a network device lacks proper IPv6 configuration, such as when the Maximum Transmission Unit (MTU) is below the minimum required for IPv6 or after the device has been unregistered. The vulnerability affects the SRv6 HMAC validation and the reception of IPv6 Segment Routing Headers, where the absence of necessary NULL checks can cause instability or crashes.

Impact

Exploitation of this vulnerability can lead to NULL pointer dereferences, causing kernel crashes or instability.