A high-severity null pointer dereference vulnerability in the Linux kernel IPv6 stack permits unauthenticated remote attackers to cause a denial of service through system instability.

The vulnerability exists within the ipv6_rpl_srh_rcv function, which fails to perform a null check on the idev pointer when processing RPL segment routing headers. An unauthenticated attacker can trigger this flaw by sending specific IPv6 traffic while the network interface MTU is fluctuating, leading to a kernel panic.

Successful exploitation of this vulnerability results in a denial of service, causing the affected system to crash or become unresponsive. Given the CVSS score of 7.5, this represents a significant risk to availability, particularly for network-facing infrastructure or critical services relying on the Linux kernel. Unplanned downtime can lead to operational disruptions and loss of service continuity.

Immediate Action: Update your Linux kernel to version 6.18.50, 7.2.4, or a later stable release where this issue has been resolved.

Proactive Monitoring: Monitor system logs for kernel panics or unexpected interface resets that correlate with high volumes of incoming IPv6 traffic.

Compensating Controls: If immediate patching is not feasible, consider restricting or filtering unnecessary IPv6 RPL traffic at the network perimeter to reduce the attack surface.

Public Exploit Available: Unknown.

The potential for remote system crashes makes this vulnerability a critical concern for maintainers of Linux-based systems. Administrators should prioritize the deployment of the provided kernel patches across all production environments to prevent service disruption caused by potential exploitation attempts.