{"id":"CVE-2026-74581","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-74581","summary":"net: ipv6: clear suppressed fib6 rule result","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ipv6: clear suppressed fib6 rule result\n\nfib6_rule_suppress() drops a suppressed route with ip6_rt_put_flags(),\nbut leaves res->rt6 pointing at the released rt6_info.\n\nIf no later rule supplies a replacement, fib6_rule_lookup() still sees\nres.rt6 and returns that stale dst to its caller. A suppressing rule can\ntherefore leak a released route back to rt6_lookup(), and the next put\nhits rcuref_put_slowpath() from dst_release().\n\nClear res->rt6 when suppressing the route so suppressed lookups fall\nthrough to the null dst instead of reusing the released one.","published":"2026-08-21T16:31:54.683Z","modified":"2026-08-23T03:53:01.519108857Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"Linux","name":"Kernel","fixedVersion":"5.10.265"}],"fix":null,"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/354db6243eca59e9d187ffbf8b7955b044ce84dc"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5d29b286c9de0b309e94b9ed083aa1a2f429434f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6aea62e433fe1b586202a5fee8b5807ce635e1d7"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6d98c70fe0ba8c7708bfd5b2a5174d2086775daa"},{"type":"WEB","url":"https://git.kernel.org/stable/c/90c57310e266eb94e4a80d6b15a9ca131d2e82cb"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9bad152c42b37499162367fe47867411e62fffa3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a341c091ca0bfae377747b1b59a3bd8ebe18a937"},{"type":"WEB","url":"https://git.kernel.org/stable/c/dc3ab04220667f254f4348572b2a0b3febff89fb"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74581.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74581"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-08-23T03:53:01.519108857Z"}}