CVE-2026-93286

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

net: appletalk: fix NULL pointer dereference in aarp_send_ddp()

aarp_send_ddp() calls atalk_find_dev_addr(dev) in the LocalTalk fast

path without checking for NULL. When the device has no AppleTalk

interface configured (dev->atalk_ptr == NULL), this leads to a NULL

pointer dereference at the at->s_net access.

KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]

RIP: 0010:aarp_send_ddp (net/appletalk/aarp.c:552 (discriminator 2))

Call Trace:

<TASK>

atalk_sendmsg (net/appletalk/ddp.c:1715)

__sys_sendto (net/socket.c:2265 (discriminator 1))

__x64_sys_sendto (net/socket.c:2272)

do_syscall_64 (arch/x86/entry/syscall_64.c:94)

entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121)

Add a NULL check consistent with the other callers of

atalk_find_dev_addr().

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References