Kernel 2.6.32.31 sends ICMPv6 with destination=unspecified

Hi,
we noticed under kernel 2.6.32.31 that if you send ICMPv6 echo request with source address unspecified (::), the kernel replies with ICMPv6 echo reply with destination address unspecified.

If there's a default route configured, this packet goes out to the network.

This violates RFC4291, 2.5.2, as unspecified must never be used as destination address.

Was this already fixed in a later kernel version?

best regards, Simon