CVE-2026-74289

A flaw was found in the Linux kernel. This use-after-free vulnerability exists within the IPv4 Forwarding Information Base (FIB) component. The issue occurs when the system attempts to dump fib_info objects in the fib_leaf_notify() function without properly managing their lifetimes through reference counting. An attacker could potentially exploit this to cause a system crash, leading to a denial of service.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because successful exploitation requires local access and precise timing to trigger a race condition within the kernel routing subsystem. Because the issue cannot be exploited remotely and depends on concurrent network namespace operations or routing listener events, the attack surface is limited on typical enterprise deployments. The primary impact is localized denial of service via a kernel crash, though local privilege escalation cannot be completely dismissed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.