CVE-2026-37459

A flaw was found in FRRouting (FRR). An unauthenticated remote attacker can exploit an integer underflow vulnerability by supplying a specially crafted BGP (Border Gateway Protocol) UPDATE message. This issue can lead to a Denial of Service (DoS).

This vulnerability allows an unauthenticated remote attacker to cause a denial of service via a specially crafted BGP UPDATE message. Due to this reason, this issue has been rated with an important severity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.