Linux Kernel IPv6 Infinite Loop Vulnerability in System Performance

CVE-2026-63968

What is CVE-2026-63968?

A vulnerability in the Linux kernel's IPv6 handling could potentially lead to an infinite loop during path selection. This issue arises in the function 'fib6_select_path()', where improper handling of linked structures could prevent proper cleanup and result in unresponsive behavior. The vulnerability was identified during an audit related to previously reported issues and has been addressed with a fix that mitigates the risk of such loops occurring during normal operations.

References