Impact
The described issue in the Linux kernel involves a race condition in the IPv6 routing logic that could previously trigger a warning when the size of a route notification message was incorrectly inferred. The bug was addressed by removing the misleading warning path; the underlying error handling still frees resources and notifies listeners when an invalid size occurs. Because the fix does not alter any kernel execution path that could be abused, there is no direct impact on confidentiality, integrity, or availability of the system.
Affected Systems
This bug was present in the general Linux kernel source tree and therefore affected all distributions that ship stock kernel code with the older IPv6 routing implementation. No exact kernel version range is provided in the advisory, so users should check whether their kernel contains the referenced patch commit identifiers. Both modules 'Linux:Linux' are listed among affected vendors.
Risk and Exploitability
Given that the vulnerability was a benign warning unrelated to malicious exploitation and no code execution path is introduced, the security risk is considered low. The CVSS score is 2.5, and the EPSS score is less than 1%; the advisory is not listed in the CISA KEV catalog. Consequently, the likelihood of exploitation is negligible. No known attack vector leverages this race condition for adversarial payloads, and the issue has been mitigated through the kernel update.
OpenCVE Enrichment
Ubuntu USN