Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-63969

In the Linux kernel, the following vulnerability has been resolved: ipv6: fix possible infinite loop in rt6_fill_node() Sashiko reported this issue [1]. Apply the same fix as commit f8d8ce1b515a ("ipv6: fix possible infinite loop in fib6_info_uses_dev()"). Writers holding tb6_lock can list_del_rcu(&rt->fib6_siblings) without waiting for RCU readers; rt->fib6_siblings.next then still points into the old ring and this softirq-side walker never reaches &rt->fib6_siblings, causing a CPU stall. fi
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:a3b78701d6efac91afb2c9495ba1b4a0087bb296e3b22751247b3f5474d14f4b
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv6/route.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b014a63d2f2c2c767762b548381882dfb1655529","status":"affected","version":"d0ec61c9f3583b76aebdbb271f5c0d3fcccd48b2","versionType":"git"},{"lessThan":"279853aec9f58d5cd723e6e5617c1c3337b30383","status":"affected","version":"52da02521ede55fb86546c3fffd9377b3261b91f","versionType":"git"},{"lessThan":"c65b1f60237daac7c56c2652e064cc566a45dc81","status":"affected","version":"34a949e7a0869dfa31a40416d2a56…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3beaf0f0a93e5803e58e057f2613a2c48efaa1ca17ae1bd419834b0bb109ec0d · sha256:25ac80df3b52a5ca… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv6/route.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.13"},{"lessThan":"6.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.143","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.93","versionType":"semver"},{"lessThanOrEqual…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3beaf0f0a93e5803e58e057f2613a2c48efaa1ca17ae1bd419834b0bb109ec0d · sha256:25ac80df3b52a5ca… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv6/route.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"b014a63d2f2c2c767762b548381882dfb1655529","status":"affected","version":"d0ec61c9f3583b76aebdbb271f5c0d3fcccd48b2","versionType":"git"},{"lessThan":"279853aec9f58d5cd723e6e5617c1c3337b30383","status":"affected","version":"52da02521ede55fb86546c3fffd9377b3261b91f","versionType":"git"},{"lessThan":"c65b1f60237daac7c56c2652e064cc566a45dc81","status":"affected","version":"34a949e7a0869dfa31a40416d2a56…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3beaf0f0a93e5803e58e057f2613a2c48efaa1ca17ae1bd419834b0bb109ec0d · sha256:25ac80df3b52a5ca… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv6/route.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.13"},{"lessThan":"6.13","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.143","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.93","versionType":"semver"},{"lessThanOrEqual…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:3beaf0f0a93e5803e58e057f2613a2c48efaa1ca17ae1bd419834b0bb109ec0d · sha256:25ac80df3b52a5ca… · /containers/cna/affected/1

Source references

6 source assertions
{"url":"https://git.kernel.org/stable/c/279853aec9f58d5cd723e6e5617c1c3337b30383"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3beaf0f0a93e5803e58e057f2613a2c48efaa1ca17ae1bd419834b0bb109ec0d · sha256:25ac80df3b52a5ca… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/5e40de719ee76b8d96e2556ce36dbd3bd07bf37d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3beaf0f0a93e5803e58e057f2613a2c48efaa1ca17ae1bd419834b0bb109ec0d · sha256:25ac80df3b52a5ca… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/9f72412bcf60144f252b0d6205106abf14344abc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3beaf0f0a93e5803e58e057f2613a2c48efaa1ca17ae1bd419834b0bb109ec0d · sha256:25ac80df3b52a5ca… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/b014a63d2f2c2c767762b548381882dfb1655529"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3beaf0f0a93e5803e58e057f2613a2c48efaa1ca17ae1bd419834b0bb109ec0d · sha256:25ac80df3b52a5ca… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/c65b1f60237daac7c56c2652e064cc566a45dc81"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3beaf0f0a93e5803e58e057f2613a2c48efaa1ca17ae1bd419834b0bb109ec0d · sha256:25ac80df3b52a5ca… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/dc36a04621dcc2447dae428709207810b6c06e14"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:3beaf0f0a93e5803e58e057f2613a2c48efaa1ca17ae1bd419834b0bb109ec0d · sha256:25ac80df3b52a5ca… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer