PT-2026-61286 · Linux+1 · Linux Kernel+1

CVE-2026-63969

·

Published

2026-05-29

·

Updated

2026-09-07

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An infinite loop can occur in the rt6 fill node() function. This happens when writers holding the tb6 lock use list del rcu() on rt->fib6 siblings without waiting for RCU readers. Consequently, rt->fib6 siblings.next may still point to the old ring, preventing the softirq-side walker from reaching &rt->fib6 siblings, which leads to a CPU stall. RCU (Read-Copy-Update) is a synchronization mechanism that allows multiple readers to access data while it is being updated.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Infinite Loop

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-14418
CVE-2026-63969
USN-8593-1
USN-8603-1
USN-8618-1
USN-8663-1
USN-8664-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu