Search: CVE-2026-23398

A NULL pointer dereference vulnerability in the Linux kernel's icmp_tag_validation() function was fixed. The function unconditionally dereferenced a pointer without checking for NULL, which could cause a kernel panic when handling certain ICMP Fragmentation Needed errors with unregistered protocol numbers. This issue affects specific linux-aws kernel versions and results in a denial of service via kernel panic. A patch is available to add the necessary NULL check and prevent the crash.