Linux kernel fib_rules_dump Heap Buffer Overflow

The vulnerability of the fibrulesdump function in the include/net/fibrules.h component of the Linux kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104593)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104593 advisory. In the Linux kernel, the following vulnerability has been resolved: net: fibrules: Don't dump dying fibrule in fibrulesdump. rockerrouterfibevent calls fibruleget...

CVE-2026-74288

A flaw was found in the Linux kernel's networking subsystem. During the process of dumping network routing rules fibrulesdump, a race condition could occur where a 'dying' rule one being deallocated is incorrectly accessed. This could lead to a reference count error, potentially causing a system...

CVE-2026-74288: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: net: fibrules: Don't dump dying fibrule in fibrulesdump. rockerrouterfibevent calls fibruleget during RCU dump. If the fibrule is dying, refcountinc will complain about it. Let's call refcountincnotzero in fibrulesdump...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that stems from the call to refcountinc for the fibrule being destroyed in the fibrulesdump function. This may lead to abnormal reference counting...