-

CVE-2026-93286

net: appletalk: fix NULL pointer dereference in aarp_send_ddp()

In the Linux kernel, the following vulnerability has been resolved:

net: appletalk: fix NULL pointer dereference in aarp_send_ddp()

aarp_send_ddp() calls atalk_find_dev_addr(dev) in the LocalTalk fast
path without checking for NULL. When the device has no AppleTalk
interface configured (dev->atalk_ptr == NULL), this leads to a NULL
pointer dereference at the at->s_net access.

 KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
 RIP: 0010:aarp_send_ddp (net/appletalk/aarp.c:552 (discriminator 2))
 Call Trace:
  <TASK>
  atalk_sendmsg (net/appletalk/ddp.c:1715)
  __sys_sendto (net/socket.c:2265 (discriminator 1))
  __x64_sys_sendto (net/socket.c:2272)
  do_syscall_64 (arch/x86/entry/syscall_64.c:94)
  entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)

Add a NULL check consistent with the other callers of
atalk_find_dev_addr().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 51cc5e756cec6071ffc620076aebcf5bae936668
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 8c4b9ceb1be780588c1c50d573d5ee308e0874d2
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < d643fd42ad96f19b5ce5cb11824fefa617191dbe
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 542c1dd41e1b0cd1c2c3ba8091c7d882eea0d680
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 8fc30f0cdf4207a5aa2341c0a98d0f1713b3ce2c
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 83899a056aeb120898a6e3a989971fc63e274e2e
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 9e7f36ab5b7bf68463faa5f7b926fea8f35597bb
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.12
Status affected
Version 0
Version < 2.6.12
Status unaffected
Version <= 5.10.*
Version 5.10.271
Status unaffected
Version <= 5.15.*
Version 5.15.222
Status unaffected
Version <= 6.1.*
Version 6.1.189
Status unaffected
Version <= 6.6.*
Version 6.6.158
Status unaffected
Version <= 6.12.*
Version 6.12.111
Status unaffected
Version <= 6.18.*
Version 6.18.53
Status unaffected
Version <= *
Version 7.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.052
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/8fc30f0cdf4207a5aa2341c0a98d0f1713b3ce2c
https://git.kernel.org/stable/c/83899a056aeb120898a6e3a989971fc63e274e2e
https://git.kernel.org/stable/c/9e7f36ab5b7bf68463faa5f7b926fea8f35597bb
https://git.kernel.org/stable/c/51cc5e756cec6071ffc620076aebcf5bae936668
https://git.kernel.org/stable/c/542c1dd41e1b0cd1c2c3ba8091c7d882eea0d680
https://git.kernel.org/stable/c/8c4b9ceb1be780588c1c50d573d5ee308e0874d2
https://git.kernel.org/stable/c/d643fd42ad96f19b5ce5cb11824fefa617191dbe