CVE-2026-97472 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, network administrators, and security teams responsible for Linux kernel-based systems. They should assess exposure and verify temporary address regeneration after prefix restoration. The vulnerability affects temporary address generation for IPv6 prefixes, potentially impacting IPv6-based network security and functionality.

Why it matters

The Linux kernel vulnerability CVE-2026-97472 affects temporary address generation for IPv6 prefixes. Linux kernel developers and maintainers, network administrators, and security teams should assess exposure and verify temporary address regeneration after prefix restoration.

• Temporary address generation failure may lead to incomplete IPv6 address configuration
• Verification of temporary address regeneration is required after prefix restoration
• Potential impact on IPv6-based network security and functionality

Technical summary

The Linux kernel has a vulnerability where it loses the ability to generate temporary privacy addresses (RFC 8981) for a prefix after it has been temporarily deprecated and then restored. This happens because the address worker attempts to generate a replacement temporary address when the current one nears expiration, but fails after marking the temporary address as already having spawned a replacement.

Defensive priority

Medium

Recommended defensive actions

• Review and apply the Linux kernel patches to fix the vulnerability
• Monitor and verify the temporary address generation for IPv6 prefixes
• Update and test IPv6 configurations to ensure proper functionality
• Perform vulnerability scanning to identify potentially affected systems
• Review system logs for indicators of exploitation
• Implement compensating controls for exposed systems
• Track patch deployment and verify remediation

Evidence notes

The CVE record and NVD vulnerability detail page provide information about the vulnerability. Three source references are provided from the Linux kernel Git repository. The vulnerability affects temporary address generation for IPv6 prefixes. Linux kernel developers and maintainers, network administrators, and security teams should assess exposure and verify temporary address regeneration after prefix restoration. The issue arises when a router temporarily deprecates an IPv6 prefix and later restores it, causing the kernel to lose its

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.