PULSE
FEED
← All CVEs
CVE WatchOct 30, 2026

CVE-2026-99121

In the Linux kernel, the following vulnerability has been resolved: ipv4: avoid divide by zero in fib_rebalance fib_rebalance() computes t

CVSS

—

No CVSS

EPSS

0.2%

p8

KEV

—

Exploit Today

2

0-100

Published: Oct 28, 2026 · Last modified: Oct 30, 2026

EPSS · 30d
0.2%EPSS · 30 days0.2%
2026-10-292026-11-07
Technical description

In the Linux kernel, the following vulnerability has been resolved: ipv4: avoid divide by zero in fib_rebalance fib_rebalance() computes the total eligible nexthop weight in one pass and programs upper bounds in a second pass. A concurrent change to ignore_routes_with_linkdown can make the first pass return zero while the second pass sees an eligible nexthop, resulting in division by zero. If the first pass reports a zero total, set each nexthop upper bound to -1 and skip the division. This matches the IPv6 fix in commit d2c26c2911dd ("ipv6: avoid divide by zero in rt6_multipath_rebalance") and preserves the lock-free rebalance path.

Official references
Related CVEs

No related CVEs by CWE or product.