https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 26 Oct 2026 21:47:22 +0000 https://db.gcve.eu/vuln/cve-2026-99072 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ipv4: stop route notification sizing when nexthop group shrinks</p> <p>Commit 680aea08e78c (&#34;net: ipv4: Emit notification when fib hardware flags are changed&#34;) added an RCU-only fib_nlmsg_size() call for asynchronous hardware flag notifications.</p> <p>fib_nlmsg_size() checks fib_info_num_path() before each iteration, then fib_info_nhc() independently reloads nh-&gt;nh_grp. If RTM_NEWNEXTHOP replaces a group with fewer paths between those loads, fib_info_nhc() returns NULL and fib_nexthop_nlmsg_size() dereferences it.</p> <p>Stop sizing when the indexed path is absent. Nexthop groups are dense, so the current snapshot has no later path.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ipv4: stop route notification sizing when nexthop group shrinks</p> <p>Commit 680aea08e78c (&#34;net: ipv4: Emit notification when fib hardware flags are changed&#34;) added an RCU-only fib_nlmsg_size() call for asynchronous hardware flag notifications.</p> <p>fib_nlmsg_size() checks fib_info_num_path() before each iteration, then fib_info_nhc() independently reloads nh-&gt;nh_grp. If RTM_NEWNEXTHOP replaces a group with fewer paths between those loads, fib_info_nhc() returns NULL and fib_nexthop_nlmsg_size() dereferences it.</p> <p>Stop sizing when the indexed path is absent. Nexthop groups are dense, so the current snapshot has no later path.</p> https://db.gcve.eu/vuln/cve-2026-99072