SECURITY ANNOUNCEMENT

CVE-2026-99073

23 October 2026

fib_info_nhc() returns NULL and the dump dereferences it through Stop the walk when the indexed path is absent. Nexthop groups are dense, so the current snapshot has no later path.

Introduced

6.94ce5dc9316de50e0da84beafe55d1344f829cece

Fixed releases

6.12.113f91e472821e32f58b03eb631e20a67157e2b928b

6.18.5721cba134c30c17ae55f468b5809336437df5d7e6

7.2.11b9a30bb7b831e8c5a47fadbdf1760918aaf009cc

7.34f4afc07dcb2edd4f9afa36595373f8cdb9b58c2

View source announcement ↗