CVE-2026-74288

High

Description

In the Linux kernel, the following vulnerability has been resolved: net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). rocker_router_fib_event() calls fib_rule_get() during RCU dump. If the fib_rule is dying, refcount_inc() will complain about it. Let's call refcount_inc_not_zero() in fib_rules_dump().

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linux0f929b59f4cd0e05bb1ecefe12b77e85911d4be2, 4b7ae30c81c2ee10a644749a3704a5c797ccc308, 2dfdc210d240bd48bb2ea746430b02b5571b6db9, a7ef30753353ba6a95d693b1863a0214222a199a, 1fbc6c6efe78f4454a51afa0587efb6826f60f00, bb4a5b3c91af3c8d705bb2e9f6f8069a70db26fc, 3af0bc1bd9039e2e50abf3e2d7fee411f38bce4e, 2821e85c058f81c9948a2fb1a634f7b47457d51c or later

Affected products

ProductAffected versionsFixed in
Linux Linux5d7bfd141924a5ece21eb612ad3c56612f041c1e ≤ v < 0f929b59f4cd0e05bb1ecefe12b77e85911d4be2, 5d7bfd141924a5ece21eb612ad3c56612f041c1e ≤ v < 4b7ae30c81c2ee10a644749a3704a5c797ccc308, 5d7bfd141924a5ece21eb612ad3c56612f041c1e ≤ v < 2dfdc210d240bd48bb2ea746430b02b5571b6db9, 5d7bfd141924a5ece21eb612ad3c56612f041c1e ≤ v < a7ef30753353ba6a95d693b1863a0214222a199a, 5d7bfd141924a5ece21eb612ad3c56612f041c1e ≤ v < 1fbc6c6efe78f4454a51afa0587efb6826f60f00, 5d7bfd141924a5ece21eb612ad3c56612f041c1e ≤ v < bb4a5b3c91af3c8d705bb2e9f6f8069a70db26fc, 5d7bfd141924a5ece21eb612ad3c56612f041c1e ≤ v < 3af0bc1bd9039e2e50abf3e2d7fee411f38bce4e, 5d7bfd141924a5ece21eb612ad3c56612f041c1e ≤ v < 2821e85c058f81c9948a2fb1a634f7b47457d51c, 4.120f929b59f4cd0e05bb1ecefe12b77e85911d4be2, 4b7ae30c81c2ee10a644749a3704a5c797ccc308, 2dfdc210d240bd48bb2ea746430b02b5571b6db9, a7ef30753353ba6a95d693b1863a0214222a199a, 1fbc6c6efe78f4454a51afa0587efb6826f60f00, bb4a5b3c91af3c8d705bb2e9f6f8069a70db26fc, 3af0bc1bd9039e2e50abf3e2d7fee411f38bce4e, 2821e85c058f81c9948a2fb1a634f7b47457d51c

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-74288 · Linux · Dark Radar