CVE-2026-93286
Description
In the Linux kernel, the following vulnerability has been resolved: net: appletalk: fix NULL pointer dereference in aarp_send_ddp() aarp_send_ddp() calls atalk_find_dev_addr(dev) in the LocalTalk fast path without checking for NULL. When the device has no AppleTalk interface configured (dev->atalk_ptr == NULL), this leads to a NULL pointer dereference at the at->s_net access. KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] RIP: 0010:aarp_send_ddp (net/appletalk/aarp.c:552 (discriminator 2)) Call Trace: <TASK> atalk_sendmsg (net/appletalk/ddp.c:1715) __sys_sendto (net/socket.c:2265 (discriminator 1)) __x64_sys_sendto (net/socket.c:2272) do_syscall_64 (arch/x86/entry/syscall_64.c:94) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) Add a NULL check consistent with the other callers of atalk_find_dev_addr().
How to fix
- Linux Linux51cc5e756cec6071ffc620076aebcf5bae936668, 8c4b9ceb1be780588c1c50d573d5ee308e0874d2, d643fd42ad96f19b5ce5cb11824fefa617191dbe, 542c1dd41e1b0cd1c2c3ba8091c7d882eea0d680, 8fc30f0cdf4207a5aa2341c0a98d0f1713b3ce2c, 83899a056aeb120898a6e3a989971fc63e274e2e, 9e7f36ab5b7bf68463faa5f7b926fea8f35597bb or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 51cc5e756cec6071ffc620076aebcf5bae936668, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 8c4b9ceb1be780588c1c50d573d5ee308e0874d2, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < d643fd42ad96f19b5ce5cb11824fefa617191dbe, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 542c1dd41e1b0cd1c2c3ba8091c7d882eea0d680, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 8fc30f0cdf4207a5aa2341c0a98d0f1713b3ce2c, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 83899a056aeb120898a6e3a989971fc63e274e2e, 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 ≤ v < 9e7f36ab5b7bf68463faa5f7b926fea8f35597bb, 2.6.12 | 51cc5e756cec6071ffc620076aebcf5bae936668, 8c4b9ceb1be780588c1c50d573d5ee308e0874d2, d643fd42ad96f19b5ce5cb11824fefa617191dbe, 542c1dd41e1b0cd1c2c3ba8091c7d882eea0d680, 8fc30f0cdf4207a5aa2341c0a98d0f1713b3ce2c, 83899a056aeb120898a6e3a989971fc63e274e2e, 9e7f36ab5b7bf68463faa5f7b926fea8f35597bb |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.