In the Linux kernel, the following vulnerability has been resolved:
ipv4: fib: bound automatic table ID allocation
fib_empty_table() probes every table ID from 1 until it finds a free one. IPv4 tables are stored in a 256-bucket hash table, so a dense set of IDs makes each probe walk a growing hash chain while RTNL is held.
Automatic table assignment ("ip rule ... table 0") is an IPv4-only legacy path. Bound the automatically allocated ID to 4096 so the RTNL hold stays bounded, without changing lookups of explicitly specified table IDs.
This changes user-visible behavior. A table-0 rule previously received the lowest free ID in 1..RT_TABLE_MAX (0xFFFFFFFF). After this patch the search stops at 4096 and the rule add fails with ENOBUFS if that range is fully occupied. Explicit table IDs above 4096 remain usable.
The automatic path is unused in practice: it is IPv4-only, not documented by ip-rule, uncovered by kernel selftests, and both NetworkManager and systemd refuse table 0.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perf6.12Upgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.12Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel6.12-develUpgrade kernel6.12-headersUpgrade bpftoolUpgrade perfUpgrade bpftool6.12Upgrade kernel6.12-toolsUpgrade python3-perfUpgrade kernel-tools-develUpgrade kernel6.12-tools-develUpgrade kernelUpgrade kernel-livepatch-6.1.189-236.399Upgrade bpftool6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel-livepatch-6.12.111-136.204Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel6.12-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade perf6.12 | Oct 13, 2026 | Sep 25, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Sep 30, 2026 | Sep 25, 2026 |
| Redhat_linux | — | No solution exists | Oct 1, 2026 | Sep 25, 2026 |
| Ubuntu | — | Upgrade linux-hwe-7.0Upgrade linux-lowlatency-hwe-5.15Upgrade linux-riscvUpgrade linux-ibm-5.15Upgrade linux-gkeUpgrade linux-awsUpgrade linux-oem-7.0Upgrade linux-gcpUpgrade linux-aws-5.15Upgrade linux-bluefieldUpgrade linuxUpgrade linux-azure-fdeUpgrade linux-nvidia-tegraUpgrade linux-nvidia-tegra-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-igxUpgrade linux-gkeopUpgrade linux-fipsUpgrade linux-hwe-5.15Upgrade linux-gcp-fipsUpgrade linux-intel-iotgUpgrade linux-aws-fipsUpgrade linux-realtimeUpgrade linux-riscv-5.15Upgrade linux-gcp-5.15Upgrade linux-nvidiaUpgrade linux-azure-5.15Upgrade linux-azure-fde-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-ibmUpgrade linux-lowlatencyUpgrade linux-riscv-7.0Upgrade linux-oracleUpgrade linux-kvmUpgrade linux-azure-fipsUpgrade linux-oracle-5.15Upgrade linux-azure | Nov 3, 2026 | Sep 25, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2026 | Sep 25, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub