- —Not scoredno CVSS score yet
- 0.21%Exploitation in 30 daysEPSS · top 89% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: ieee802154: 6lowpan: fix NULL dereference in lowpan_newlink TUNSETLINK allows a TUN device to change its link-layer type to ARPHRD_IEEE802154 without initializing ieee802154_ptr. lowpan_newlink() checks only the device type before dereferencing the pointer, so an RTM_NEWLINK request can trigger a NULL pointer dereference. Reject devices without ieee802154_ptr along with devices of the wrong type.
Timeline
ID reserved
By Linux
- 1 day later
· 1 day later
Published
- 24 days later
· 24 days later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.
- EPSS (exploitation in 30 days)
- 0.21% · top 89% of all CVEs (12 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected 51e0e5d8124ece158927a4c2288c0929d3b53aa3 – < a1760f21c32adce41af5ed5687200865d8feaaeb
- affected 51e0e5d8124ece158927a4c2288c0929d3b53aa3 – < 5063b9354e6e285dae61e530b30458498444a914
- affected 51e0e5d8124ece158927a4c2288c0929d3b53aa3 – < 16d8e0b560d50cd1a9e6d77a9a154a94c4d6021e
- affected 51e0e5d8124ece158927a4c2288c0929d3b53aa3 – < 543994fa03c36a91d967a12c5c99cae74899504c
- affected 51e0e5d8124ece158927a4c2288c0929d3b53aa3 – < 1c7710af7ad9532b534f1c134c11b04dbe4e0e0f
- affected 51e0e5d8124ece158927a4c2288c0929d3b53aa3 – < 98ce5a42cde780ee0e40378607d4428c8fc12ec1
- affected 51e0e5d8124ece158927a4c2288c0929d3b53aa3 – < 8528da2333ce05cf627f93425f9d05efb08b3146
- affected 51e0e5d8124ece158927a4c2288c0929d3b53aa3 – < bf79662bc85e820ac3b846e2f347da29fbf6ac95
- affected 4.3
- unaffected < 4.3
- unaffected 5.10.271 – ≤ 5.10.*
- unaffected 5.15.222 – ≤ 5.15.*
- unaffected 6.1.189 – ≤ 6.1.*
- unaffected 6.6.158 – ≤ 6.6.*
- unaffected 6.12.111 – ≤ 6.12.*
- unaffected 6.18.53 – ≤ 6.18.*
- unaffected 7.2.7 – ≤ 7.2.*
- unaffected 7.3 – ≤ *
References
References8
- https://git.kernel.org/stable/c/a1760f21c32adce41af5ed5687200865d8feaaeb (opens in a new tab)
- https://git.kernel.org/stable/c/5063b9354e6e285dae61e530b30458498444a914 (opens in a new tab)
- https://git.kernel.org/stable/c/16d8e0b560d50cd1a9e6d77a9a154a94c4d6021e (opens in a new tab)
- https://git.kernel.org/stable/c/543994fa03c36a91d967a12c5c99cae74899504c (opens in a new tab)
- https://git.kernel.org/stable/c/1c7710af7ad9532b534f1c134c11b04dbe4e0e0f (opens in a new tab)
- https://git.kernel.org/stable/c/98ce5a42cde780ee0e40378607d4428c8fc12ec1 (opens in a new tab)
- https://git.kernel.org/stable/c/8528da2333ce05cf627f93425f9d05efb08b3146 (opens in a new tab)
- https://git.kernel.org/stable/c/bf79662bc85e820ac3b846e2f347da29fbf6ac95 (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2026-86732 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2026-97601)Record last updated .