CVE-2026-43501 | Linux Kernel up to 7.1-rc1 RFC 6554 Source Routing Header ipv6_rpl_srh_rcv out-of-bounds write (WID-SEC-2026-1656)

A vulnerability classified as critical has been found in Linux Kernel up to 6.6.139/6.12.85/6.18.26/7.0.3/7.1-rc1. Impacted is the function ipv6_rpl_srh_rcv of the component RFC 6554 Source Routing Header Handler. Performing a manipulation results in out-of-bounds write. This vulnerability is reported as CVE-2026-43501. The attacker must have access to the local network to execute the attack. No exploit exists. It is recommended to upgrade the affected component.