Moderate Vulnerability in Kernel Package: Use-After-Free in IPv6 Address Deletion
Summary
RLSA-2026:4723: Moderate: kernel security update. Affects kernel versions < 0:6.12.0-124.45.1.el10_1. Fixed in 0:6.12.0-124.45.1.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The kernel package is a fundamental component of any Linux operating system, providing essential services and managing hardware resources. It acts as a bridge between applications and the underlying hardware, ensuring efficient operation and resource allocation. The kernel is crucial for system stability and security, making it vital to address any vulnerabilities that may arise.
Vulnerability Detail
The vulnerability identified as CVE-2026-23010 is a use-after-free issue in the Linux kernel related to IPv6 address deletion. This flaw can lead to a denial of service, where an attacker could exploit the vulnerability to crash the system or make it unresponsive. The issue arises when the kernel improperly manages memory during the deletion of IPv6 addresses, potentially allowing malicious actors to manipulate the system's memory state.
How To Fix
Minimum fixed version
0:6.12.0-124.45.1.el10_1
This is the first release that contains the fix.
sudo dnf update kernelTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. The best course of action is to apply the available patch as soon as possible.
Conclusion
The vulnerability CVE-2026-23010 in the Linux kernel poses a significant risk of denial of service due to a use-after-free condition during IPv6 address deletion. It is essential to update to the patched version of the kernel to mitigate this risk effectively. Regular monitoring and timely updates are crucial for maintaining system security.
See every vulnerability recorded for kernel →
FAQ
CVE-2026-23010 is a security vulnerability in the Linux kernel that involves a use-after-free condition during IPv6 address deletion, potentially leading to a denial of service.
If exploited, this vulnerability can cause your system to crash or become unresponsive, impacting the availability of services and applications running on the affected Linux distribution.
While there are no specific workarounds, it is crucial to prioritize updating your kernel to mitigate the risk associated with this vulnerability.
You can use Vulert, which monitors and alerts for open-source vulnerabilities in real-time. By utilizing the Vulert playground, you can check if your application is affected without needing to sign up.
The CVSS score for CVE-2026-23010 is 7.3, indicating a moderate severity level that requires prompt attention.
Related vulnerabilities
Recent vulnerabilities recorded for kernel.
