In the Linux kernel’s IPv4 networking stack, a race condition occurs while dumping the forward information base (FIB). Based on the description, it is inferred that the code mistakenly dereferences a null pointer, producing a kernel OOPS. The resulting kernel crash causes a denial of service by halting the system.

All systems running a Linux kernel version that does not incorporate the RCU‑protected inet_dump_fib() change introduced by commit 4ce5dc9316de are affected. This applies across mainstream Linux distributions because the code resides in the mainline kernel source.

The flaw can be triggered when an attacker can concurrently trigger an IPv4 FIB dump and replace a nexthop group. Based on the description, it is inferred that both the dump and the nexthop replacement commands require privileged execution, typically root. While no public exploit is available, the vulnerability can lead to a kernel OOPS that stops the system, a moderate‑severity denial of service. The EPSS score is < 1%, indicating a very low but nonzero exploitation probability, and the issue is not listed in the CISA KEV catalog.