Linux Kernel Vulnerability in Peer Allocation Handling by The Linux Foundation

CVE-2026-74550

What is CVE-2026-74550?

In the Linux kernel, a vulnerability occurs when the system fails to properly handle peer allocation under memory pressure or tree size limitations. Specifically, during the process of sending ICMP/NDISC Redirect messages, if the peer entry cannot be allocated, the system erroneously sends out un-rate-limited redirects. This behavior can result in a potential ICMP packet storm, which can overwhelm network resources. The resolution ensures that the system fails safely in these scenarios, preventing the sending of redirects when the peer is NULL.

References