CVE-2026-74289

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the IPv4 forwarding information base (FIB) when dumping fib info under Read-Copy-Update (RCU). The problem occurs because the functions mlxsw sp router fib4 event(), rocker router fib event(), and nsim fib4 prepare event() call fib info hold() or refcount inc() in an unsafe manner while the fib info is dying. This can lead to a reference count addition on zero, resulting in a use-after-free condition. The issue is specifically related to the fib leaf notify() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.