PT-2026-46023 · Linux+1 · Linux Kernel+1
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An out-of-bounds read exists in the IPv6 routing component of the Linux kernel. The issue occurs within the
fib6 add rt2node() function when an IPv6 route is created using RTA NH ID, as the struct fib6 info may lack the trailing struct fib6 nh. This leads to an out-of-bounds access when the system attempts to read iter->fib6 nh without first verifying if iter->nh is NULL.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel