IPv4 FIB Dump Vulnerability in Linux Kernel

CVE-2026-99073

What is CVE-2026-99073?

A vulnerability exists in the Linux kernel that can cause issues during IPv4 Forwarding Information Base (FIB) dumps when the nexthop group undergoes changes. Specifically, the bug stems from a scenario where the group of nexthops is modified while a dump operation is in progress, leading to potential null pointer dereference errors. When the nexthop group shrinks and the indexed path is absent, it could result in system instability or crashes, impacting overall network performance and reliability. The vulnerability has been addressed to ensure that the dump operation correctly halts when paths are no longer available.

References