Astra Linux – Vulnerability in Linux 5.10

A flaw was discovered in the IPv6 module of the Linux kernel. The arg.result parameter was not used consistently in fib6rulelookup; sometimes rt6info was used, and other times fib6info. This issue was not accounted for in other parts of the code, where rt6info was expected to be used...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fix memory leak in fib6rulesuppress The kernel causes a memory leak when a fib rule is present in IPv6 nftables firewall rules, and a suppressprefix rule is present in IPv6 routing rules used by certain tools such as...

UBUNTU-CVE-2026-74581

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6rulesuppress drops a suppressed route with ip6rtputflags, but leaves res-rt6 pointing at the released rt6info. If no later rule supplies a replacement, fib6rulelookup still sees...

CVE-2026-74581

In the Linux kernel, the following vulnerability has been resolved: net: ipv6: clear suppressed fib6 rule result fib6rulesuppress drops a suppressed route with ip6rtputflags, but leaves res-rt6 pointing at the released rt6info. If no later rule supplies a replacement, fib6rulelookup still sees...

PT-2026-79402

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv6 networking stack where the fib6 rule suppress function drops a suppressed route using ip6 rt put flags but fails to clear the res-rt6 pointer. This causes fib...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004790)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004790 advisory. A flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6rulelookup, sometimes holding rt6info and other times...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004282)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004282 advisory. A flaw was found in the IPv6 module of the Linux kernel. The arg.result was not used consistently in fib6rulelookup, sometimes holding rt6info and other times...

AZL-42487 CVE-2024-36902 affecting package kernel for versions less than 5.15.158.2-1

In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6rules: avoid possible NULL dereference in fib6ruleaction syzbot is able to trigger the following crash 1, caused by unsafe ip6dstidev use. Indeed ip6dstidev can return NULL, and must always be checked. 1 Oops: general...

DEBIAN-CVE-2024-36902

In the Linux kernel, the following vulnerability has been resolved: ipv6: fib6rules: avoid possible NULL dereference in fib6ruleaction syzbot is able to trigger the following crash 1, caused by unsafe ip6dstidev use. Indeed ip6dstidev can return NULL, and must always be checked. 1 Oops: general...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible null pointer dereference in the ipv6:fib6rules module fib6ruleaction...

DEBIAN-CVE-2021-47546

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix memory leak in fib6rulesuppress The kernel leaks memory when a fib rule is present in IPv6 nftables firewall rules and a suppressprefix rule is present in the IPv6 routing rules used by certain tools such as wg-quick. I...

PT-2024-4105

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.37 Description The issue is related to a possible NULL dereference in the fib6 rule action function, which can be triggered by unsafe ip6 dst idev use. This can cause a general protection fault and potentiall...

SUSE CVE-2019-18198

In the Linux kernel before 5.3.4, a reference count usage error in the fib6rulesuppress function in the fib6 suppression feature of net/ipv6/fib6rules.c, when handling the FIBLOOKUPNOREF flag, can be exploited by a local attacker to corrupt memory, aka CID-ca7a03c41753...

PT-2021-27024

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.15.6 Description A memory leak issue was discovered in the fib6 rule suppress function related to IPv6. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26915

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.164 Description A memory leak issue was discovered in the fib6 rule suppress function related to IPv6. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2021-26955

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.4 through v5.10.83 Description A memory leak issue was discovered in the fib6 rule suppress function related to IPv6. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

The vulnerability of the fib6_rule_lookup() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fib6rulelookup function in the Linux operating system is related to errors in handling exceptional conditions. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2019-20422

In the Linux kernel before 5.3.4, fib6rulelookup in net/ipv6/ip6fib.c mishandles the RT6LOOKUPFDSTNOREF flag in a reference-count decision, leading to for example a crash that was identified by syzkaller, aka CID-7b09c2d052db...

UBUNTU-CVE-2019-20422

In the Linux kernel before 5.3.4, fib6rulelookup in net/ipv6/ip6fib.c mishandles the RT6LOOKUPFDSTNOREF flag in a reference-count decision, leading to for example a crash that was identified by syzkaller, aka CID-7b09c2d052db...

The vulnerability of the fib6_rule_suppress() function in the Linux operating system allows a hacker to trigger memory corruption.

The vulnerability of the fib6rulesuppress function in the Linux operating system is related to the lack of resource release after the expiration of its valid duration. Exploiting this vulnerability can allow an attacker to cause memory corruption...