CVE-2026-74550

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where the system may send un-rate-limited ICMP/NDISC Redirect messages when peer allocation fails due to memory pressure or tree size caps. This occurs because the functions inet getpeer v4() or inet getpeer v6() fail to allocate a peer entry, causing redirect handlers to bypass rate limiting. Specifically, in IPv4, ip rt send redirect() calls icmp send() directly when the peer variable is NULL. In IPv6, ip6 forward() and ndisc send redirect() pass a NULL peer into inet peer xrlim allow(), which returns true. Since these redirects are not included in the default global rate limit mask sysctl icmp ratemask, this behavior can lead to an un-rate-limited ICMP packet storm.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.