A critical vulnerability in the Linux kernel IPv4 FIB lookup process could allow unauthenticated attackers to bypass routing restrictions, resulting in unauthorized data access or network manipulation.

The vulnerability exists within the fib_lookup function, which fails to correctly bail out during route lookups when multiple tables are configured but no rules are present. This allows for an unauthenticated attacker to manipulate network traffic paths.

The potential for unauthorized network routing allows attackers to redirect traffic, intercept sensitive data, or bypass security controls, leading to significant data confidentiality and integrity risks. Given the CVSS score of 10.0, this represents a critical threat to infrastructure security that requires immediate attention to prevent system compromise.

Immediate Action: Update the Linux kernel to version 5.10.261, 5.15.212, 6.1.178, 6.6.145, or later.

Proactive Monitoring: Monitor network traffic for unusual routing behavior or unexpected traffic flows that may indicate attempts to exploit the routing table lookup logic.

Compensating Controls: Implement strict network segmentation and egress filtering to limit the impact of potential traffic redirection or unauthorized network access.

Public Exploit Available: Unknown

Due to the critical nature of this vulnerability and its potential for widespread impact on networked systems, security teams should prioritize patching the Linux kernel across all affected environments immediately. Failure to apply these updates leaves the system susceptible to unauthenticated remote network manipulation.