CVE-2026-74562

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A slab-use-after-free issue exists in the Linux kernel during nexthop replacement. The functions fib6 check nh list() and nexthop replace notify() traverse the nh->f6i list without holding the nh->lock. Because IPv6 RTM NEWROUTE and RTM DELROUTE operations can mutate this list under the nh->lock without RTNL serialization, a race condition occurs during concurrent route deletions. This can lead to the unlinking and freeing of fib6 info while it is still being accessed, resulting in a memory corruption error.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.