CVE-2026-98485 netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read

In the Linux kernel, the following vulnerability has been resolved: netfilter: ip6trt: fix zero-address non-strict match out-of-bounds read rtmt6check permits rules to be configured with rtinfo-addrnr == 0 even when address matching IP6TRTFSTMASK is requested. In the IP6TRTFSTNSTRICT path, rtmt6...

CVE-2026-98485

The Linux kernel contains an out-of-bounds read vulnerability in the netfilter: ip6t_rt component. The issue occurs because rt_mt6_check() allows rules to be configured with rtinfo->addrnr == 0 even when address matching (IP6T_RT_FST_MASK) is requested. In the IP6T_RT_FST_NSTRICT path, the rt_...