A null pointer dereference vulnerability in the Linux kernel allows unauthenticated remote attackers to cause a system crash via a denial of service.

This vulnerability is a null pointer dereference occurring in the __in6_dev_stats_get function. An attacker can trigger this condition if a device is unregistered while the kernel attempts to access its statistics, leading to a kernel panic.

Successful exploitation of this vulnerability results in a denial of service, causing the affected system to crash or become unresponsive. Given the CVSS score of 7.5, this high severity flaw poses a significant risk to availability, particularly for critical infrastructure or network services relying on the Linux kernel.

Immediate Action: Update the Linux kernel to the corrected versions (5.10.261, 5.15.212, 6.1.178, or 6.6.145) or the latest stable release provided by your distribution vendor.

Proactive Monitoring: Monitor system logs for kernel oops or panic events related to network interface de-registration.

Compensating Controls: Implement network-level filtering to restrict access to the affected services if an immediate kernel update is not feasible.

Public Exploit Available: No

This vulnerability represents a significant risk to system stability due to the ease of triggering a kernel panic. IT administrators should prioritize patching their Linux kernels to the recommended versions to eliminate the possibility of remote service disruption.