Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-99070 Details

Description

In the Linux kernel, the following vulnerability has been resolved: ipv6: do not warn on route notification size race fib6_info_hw_flags_set() sizes the skb with rt6_nlmsg_size() and later fills it with rt6_fill_node(). With nexthop compatibility mode enabled, a concurrent replacement can grow the group between these independent snapshots. rt6_fill_node() can then legitimately return -EMSGSIZE, so the warning does not prove a sizing bug. Remove the warning. The existing error path still frees the skb and reports the error to listeners.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/24b2c95a046e15c9504a6d672b6b0b252952493f kernel.org
https://git.kernel.org/stable/c/291fe0bafee78c95f9f2e7f579f17793fd5a1e5a kernel.org
https://git.kernel.org/stable/c/4ac7d92a4698e34e614c254359665b9de1f65283 kernel.org
https://git.kernel.org/stable/c/7b112bd43f1172fb152e848570a957467008a5ae kernel.org
https://git.kernel.org/stable/c/8a3b935b6b6037eefb36bd27a60793a008358e8d kernel.org

see all 7 references

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-99070
NVD Published Date:
Oct 23, 2026
NVD Last Modified:
Oct 30, 2026
Source:
kernel.org
CVE-2026-99070 Details - Not Deferred