Network Notification Size Vulnerability in Linux Kernel

CVE-2026-99071

What is CVE-2026-99071?

A vulnerability in the Linux kernel related to route notifications has been identified. The issue arises from improper handling of asynchronous notifications for hardware flag changes, where concurrent replacements could lead to size discrepancies. This can result in erroneous -EMSGSIZE errors but does not indicate a sizing bug. The Linux kernel maintainers have removed unnecessary warnings related to this scenario, ensuring that the error paths continue to handle memory correctly while reporting issues to listeners without improper alerts.

References