Out-of-Bound Access in Linux Kernel IPv6 Module

CVE-2026-46260

What is CVE-2026-46260?

A vulnerability exists within the Linux kernel's IPv6 module where an out-of-bounds read can occur in the fib6_add_rt2node() function. This can lead to potential security risks due to improper access controls during IPv6 route management, specifically when routes are created involving the RTA_NH_ID parameter. A crucial check for the fib6_nh structure was implemented to prevent reading beyond allocated memory, thereby enhancing stability and security within the kernel.

References