{"apiVersion":"1.0","identifier":"CVE-2026-72421","description":"In the Linux kernel, the following vulnerability has been resolved: ipv4: fib: Don-t ignore error route in local/main tables. When CONFIG_IP_MULTIPLE_TABLES is enabled but no rule is added, fib_lookup() performs route lookup directly on two tables. Since the first lookup does not properly bail out, the result of an error route in the merged local/main table could be overwritten by another route in the default table: # unshare -n # ip link set lo up # ip route add 192.168.0.0/24 dev lo table 253 # ip route add unreachable 192.168.0.0/24 # ip route get 192.168.0.1 192.168.0.1 dev lo table default uid 0 cache <local> Once a random rule is added, the error route is respected: # ip rule add table 0 # ip rule del table 0 # ip route get 192.168.0.1 RTNETLINK answers: No route to host Let-s fix the inconsistent behaviour.","publishedAt":"2026-08-15T06:22:15","lastModifiedAt":"2026-08-17T06:19:09","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-72421","cvssScore":10,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","epssProbability":0.00571,"riskScore":1.05,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-72421","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-72421","en":"https://www.redsauce.net/en/cves/CVE-2026-72421","fr":"https://www.redsauce.net/fr/cves/CVE-2026-72421","pt":"https://www.redsauce.net/pt/cves/CVE-2026-72421","de":"https://www.redsauce.net/de/cves/CVE-2026-72421","sk":"https://www.redsauce.net/sk/cves/CVE-2026-72421","el":"https://www.redsauce.net/el/cves/CVE-2026-72421"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-72421"}}