In the Linux kernel, the following vulnerability has been resolved: ipv4: do not warn on route notification size race Commit 680aea08e78c ("net: ipv4: Emit notification when fib hardware flags are changed") added asynchronous route notifications for hardware flag changes. fib_alias_hw_flags_set() sizes the skb with fib_nlmsg_size() and later fills it with fib_dump_info() while holding only RCU. With nexthop compatibility mode enabled, a concurrent replacement can grow the group between these independent snapshots. fib_dump_info() can then legitimately return -EMSGSIZE, so the warning does not prove a sizing bug. Remove the warning. The existing error path still frees the skb and reports the error to listeners.

amazon_alas ALAS2KERNEL-5.15-2026-121: Amazon Linux 2 (EOS) Security Advisory:ALAS2KERNEL-5.15-2026-121

An update of the linux package has been released.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - ipv4: do not warn on route notification size race Commit 680aea08e78c (net: ipv4: Emit notification when     fib hardware flags are changed) added asynchronous route notifications for hardware flag changes.
    fib_alias_hw_flags_set() sizes the skb with fib_nlmsg_size() and later fills it with fib_dump_info() while     holding only RCU. With nexthop compatibility mode enabled, a concurrent replacement can grow the group     between these independent snapshots. fib_dump_info() can then legitimately return -EMSGSIZE, so the     warning does not prove a sizing bug. Remove the warning. The existing error path still frees the skb and     reports the error to listeners. (CVE-2026-99071)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Type	Severity
375086	Photon OS 5.0: Linux PHSA-2026-5.0-92-1044	Nessus	PhotonOS Local Security Checks	Local	critical
373466	Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-3335)	Nessus	Amazon Linux Local Security Checks	Local	medium
371539	Linux Distros Unpatched Vulnerability : CVE-2026-99071	Nessus	Misc.	Local	medium

Detections

Analytics

CVE-2026-99071

medium

Tenable Plugins

Coming Soon

critical

medium

medium