CVE-2026-64572

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab-use-after-free issue exists in the IPv4 Forwarding Information Base (FIB) implementation. The fib table insert() function adds a new fa object to the fa list using fib insert alias() before invoking FIB entry notifiers. If a notifier fails, the error path removes new fa via fib remove alias() and immediately frees it using kmem cache free(). However, because fib table lookup() accesses this list under rcu read lock(), a concurrent lookup may continue to read the new fa object after it has been freed. Triggering this condition requires CAP NET ADMIN privileges and a registered FIB notifier capable of rejecting a route.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.