Linux Kernel Vulnerability in Nexthop Component by Linux Foundation

CVE-2026-64576

What is CVE-2026-64576?

A vulnerability exists in the nexthop component of the Linux kernel, where an uninitialized netlink_ext_ack is passed to critical functions. This can lead to dereferencing stale pointers and result in a kernel panic. The fault occurs when initialization fails and improperly propagated errors occur, resulting in potential system crashes due to undefined behavior. Patching the affected code to ensure proper initialization of error handling structures is essential to mitigate this risk.

References