Linux IPv6 Segment Routing Bug Can Write to Freed Packet Memory

Linux can move a network packet’s data in memory while some networking code still holds its old address. That saved address is called a pointer. A patch and maintainer discussion posted on Sep 7, 2026 describe how that mismatch can make an IPv6 Segment Routing eBPF action write to memory that Linux has already released. Segment Routing steers packets through specified network waypoints; eBPF lets small programs run inside the kernel to customize tasks such as packet handling.LinuxSecurity – Security ArticlesRead More