CVE-2026-74581

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the IPv6 networking stack where the fib6 rule suppress() function drops a suppressed route using ip6 rt put flags() but fails to clear the res->rt6 pointer. This causes fib6 rule lookup() to return a stale destination to its caller if no subsequent rule provides a replacement. Consequently, a suppressing rule can leak a released route back to rt6 lookup(), leading to a call to rcuref put slowpath() during dst release(). This is a use-after-free scenario where the system attempts to access memory that has already been released.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.