A NULL pointer dereference in the IPv6 RPL segment routing header reception path causes the kernel to crash when it attempts to access device configuration after the link MTU has been lowered below the minimum IPv6 threshold. The missing NULL check on the interface structure triggers a KASAN fault that typically results in a kernel panic, effectively denying service to all users on the affected system.

All Linux kernel instances that have not applied the recent commit and are running a version that contains the vulnerable code path are affected. Because no specific kernel versions are enumerated, any distribution shipping an unpatched kernel is at risk; downstream releases that retain the old RPL handling code inherit the same vulnerability.

The exploit requires the ability to send IPv6 packets to the target interface and to manipulate that interface's MTU setting, which is generally available to a privileged host or an attacker with local network access. No publicly documented exploit is known at this time. The EPSS score is <1%, indicating a low probability of exploitation, and the CVSS score of 5.9 reflects moderate severity. The vulnerability is not listed in CISA's KEV catalog.