CVE-2026-120033

In FRRouting 10.1 and later , the bgpd daemon fails to correctly close a BGP session when the Send Hold Timer (RFC 9687) expires. This occurs when a neighbor stops accepting data for twice the hold time while still sending KEEPALIVEs. This flaw leaves the session in a phantom Established state or...