Vulnerability in Linux

CVE-2026-74288

In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). rocker_router_fib_event() calls fib_rule_get() during RCU dump. If the fib_rule is dying, refcount_inc() will complain about it. Let's call refcount_inc_not_zero() in fib_rules_dump().

Affected products

  • Linux — versions 5d7bfd141924a5ece21eb612ad3c56612f041c1e, 4.12, 0

References