CVE-2026-46260

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read exists in the IPv6 routing component of the Linux kernel. The issue occurs within the fib6 add rt2node() function when an IPv6 route is created using RTA NH ID, as the struct fib6 info may lack the trailing struct fib6 nh. This leads to an out-of-bounds access when the system attempts to read iter->fib6 nh without first verifying if iter->nh is NULL.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.