Linux Kernel Vulnerability in IPv6 Routing Mechanism

CVE-2026-74581

What is CVE-2026-74581?

A vulnerability in the Linux kernel's IPv6 routing mechanism allows suppressed routes to potentially leak stale destination data. When a route is suppressed using 'fib6_rule_suppress()', the associated resource pointer can incorrectly reference released routing information, leading to security concerns as later lookups may encounter invalid or stale routes. This can result in unexpected behavior in network routing, potentially impacting system stability and security. The issue has been addressed by ensuring that the resource pointer is cleared when routes are suppressed, preventing leakage of released routes during lookups.

References