CVE-2026-74550 is a vulnerability in Linux Kernel
Published on August 15, 2026
net: do not send ICMP/NDISC Redirects when peer allocation fails
In the Linux kernel, the following vulnerability has been resolved:
net: do not send ICMP/NDISC Redirects when peer allocation fails
When inet_getpeer_v4() or inet_getpeer_v6() fails to allocate a peer entry
under memory pressure or tree size caps, redirect handlers previously fell
back to sending un-rate-limited ICMP/NDISC Redirect messages.
In IPv4, ip_rt_send_redirect() called icmp_send() directly when peer == NULL.
In IPv6, ip6_forward() and ndisc_send_redirect() passed a NULL peer into
inet_peer_xrlim_allow(), which returned true when peer == NULL.
Because ICMP/NDISC Redirects are not part of the default global rate limit
mask (sysctl_icmp_ratemask), sending redirects when peer == NULL creates
an un-rate-limited ICMP packet storm.
Fix this by failing closed in ip_rt_send_redirect(), ip6_forward(), and
ndisc_send_redirect() when peer is NULL.
Products Associated with CVE-2026-74550
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 92d8682926342d2b6aa5b2ecc02221e00e1573a0 and below f5ecaa7ea7686fa7ecdb6affc9d3a9a42e4524b1 is affected.
- Version 92d8682926342d2b6aa5b2ecc02221e00e1573a0 and below 21666f7af49a90ef44d474916b8ef4402dfd74f5 is affected.
- Version 92d8682926342d2b6aa5b2ecc02221e00e1573a0 and below 5ec5f00fc606a6df8434948c4552b3cb1176595d is affected.
- Version 92d8682926342d2b6aa5b2ecc02221e00e1573a0 and below 828f6670d110ff2bf44c743037b38badc315704c is affected.
- Version 92d8682926342d2b6aa5b2ecc02221e00e1573a0 and below dbc3791e3b2472e1ccc08947e0f83b443470ff4f is affected.
- Version 2.6.39 is affected.
- Before 2.6.39 is unaffected.
- Version 6.6.151, <= 6.6.* is unaffected.
- Version 6.12.103, <= 6.12.* is unaffected.
- Version 6.18.44, <= 6.18.* is unaffected.
- Version 7.1.8, <= 7.1.* is unaffected.
- Version 7.2-rc6, <= * is unaffected.