CVE-2026-74288

HighCVSS 7.8

Published: 15/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 15/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

Summary

In the Linux kernel, fib_rules_dump() calls fib_rule_get() during RCU dump, which can cause refcount issues if the rule is dying. The fix uses refcount_inc_not_zero().

Risk Assessment

This may cause reference counting errors, leading to crashes or incorrect routing behavior.

Recommendation

Apply the Linux kernel patch that uses refcount_inc_not_zero() in fib_rules_dump().

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). rocker_router_fib_event() calls fib_rule_get() during RCU dump. If the fib_rule is dying, refcount_inc() will complain about it. Let's call refcount_inc_not_zero() in fib_rules_dump().