CVE-2026-64569

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference exists in the mpls valid fib dump req() function when the kernel is built with CONFIG INET=n. In this configuration, the function processes the parsed attribute table directly. When an RTM GETROUTE dump for AF MPLS is requested with strict checking but without the RTA OIF attribute, the system passes tb[RTA OIF] to the nla get u32() function without verifying its presence, leading to a crash. Because rtnetlink rcv msg() allows RTM GETROUTE requests without CAP NET ADMIN privileges, an unprivileged user can trigger this issue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.