CVE-2026-45905

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the icmp route lookup() function during the reverse path process for sending ICMP error messages with XFRM (IPsec) policies. When the system acts as a forwarding node, it calls ip route input() to simulate the reverse packet's input path. If the destination address becomes local between the initial check and the ip route input() call (for example, due to a concurrent ip addr add command), ip route input() returns a LOCAL route. This results in dst.output being set to ip rt bug(), which triggers a warning when the route is used for ICMP output.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.