CVE-2026-72502 | Linux Kernel up to 7.1.4 IPv6 TCP Stack ip6_default_advmss null pointer dereference

A vulnerability was found in Linux Kernel up to 7.1.4. It has been rated as critical. Affected by this issue is the function ip6_default_advmss of the component IPv6 TCP Stack. The manipulation leads to null pointer dereference.

This vulnerability is referenced as CVE-2026-72502. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.