CVE-2026-64576

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The nh res bucket migrate() function passes an uninitialized netlink ext ack to call nexthop res bucket notifiers(). If nh notifier res bucket info init() fails, such as when kzalloc returns -ENOMEM, the error is propagated before any notifier sets extack. msg. Consequently, the error path attempts to format a stale pointer using pr err ratelimited(). When CONFIG INIT STACK NONE is enabled, this leads to the dereferencing of uninitialized stack memory, which can result in a general protection fault and a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.