CVE-2026-97598

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the IPv4 forwarding information base (fib) where the fib empty table() function probes every table ID starting from 1 until a free one is found. Because IPv4 tables are stored in a 256-bucket hash table, a dense set of IDs causes each probe to traverse an increasing hash chain while the Route Netlink (RTNL) lock is held. This occurs during automatic table assignment, specifically when using the legacy IPv4 path such as ip rule ... table 0. To mitigate this, the automatically allocated ID is now bounded to 4096 to ensure the RTNL hold remains limited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.