Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-74288

net: fib_rules: Don't dump dying fib_rule in fib_rules_dump().

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). rocker_router_fib_event() calls fib_rule_get() during RCU dump. If the fib_rule is dying, refcount_inc() will complain about it. Let's call refcount_inc_not_zero() in fib_rules_dump().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5d7bfd141924a5ece21eb612ad3c56612f041c1e to < 0f929b59f4cd0e05bb1ecefe12b77e85911d4be2affected
  • 5d7bfd141924a5ece21eb612ad3c56612f041c1e to < 4b7ae30c81c2ee10a644749a3704a5c797ccc308affected
  • 5d7bfd141924a5ece21eb612ad3c56612f041c1e to < 2dfdc210d240bd48bb2ea746430b02b5571b6db9affected
  • 5d7bfd141924a5ece21eb612ad3c56612f041c1e to < a7ef30753353ba6a95d693b1863a0214222a199aaffected
  • 5d7bfd141924a5ece21eb612ad3c56612f041c1e to < 1fbc6c6efe78f4454a51afa0587efb6826f60f00affected
  • 5d7bfd141924a5ece21eb612ad3c56612f041c1e to < bb4a5b3c91af3c8d705bb2e9f6f8069a70db26fcaffected
  • 5d7bfd141924a5ece21eb612ad3c56612f041c1e to < 3af0bc1bd9039e2e50abf3e2d7fee411f38bce4eaffected
  • 5d7bfd141924a5ece21eb612ad3c56612f041c1e to < 2821e85c058f81c9948a2fb1a634f7b47457d51caffected

Linux Linux

Default version status: affected

  • 4.12affected
  • 0 to < 4.12unaffected
  • 5.10.261 to ≤ 5.10.*unaffected
  • 5.15.212 to ≤ 5.15.*unaffected
  • 6.1.178 to ≤ 6.1.*unaffected
  • 6.6.145 to ≤ 6.6.*unaffected
  • 6.12.97 to ≤ 6.12.*unaffected
  • 6.18.40 to ≤ 6.18.*unaffected
  • 7.1.5 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References