PT-2026-116704

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the netfilter ip6t rt module. The rt mt6 check function allows rules to be configured with rtinfo-addrnr set to 0 even when address matching IP6T RT FST...

PT-2026-128378

In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6t rt: fix zero-address non-strict match out-of-bounds read rt mt6 check permits rules to be configured with rtinfo-addrnr == 0 even when address matching IP6T RT FST MASK is requested. In the IP6T RT FST NSTRICT pat...

netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check()

...