Summary
It was discovered that FRR incorrectly handled certain OSPF Traffic
Engineering and Segment Routing TLVs. An attacker could possibly use this
issue to cause FRR to crash, resulting in a denial of service.
(CVE-2026-28532)
It was discovered that FRR incorrectly handled certain BGP FlowSpec
components. An attacker could possibly use this issue to cause FRR to
crash, resulting in a denial of service. (CVE-2026-37457)
It was discovered that FRR did not properly validate certain MP_REACH_NLRI
messages. An authenticated user could possibly use this issue to cause FRR
to crash, resulting in a denial of service. (CVE-2026-37458)
It was discovered that FRR incorrectly handled processing certain BGP
UPDATE messages. An attacker could possibly use this issue to cause FRR to
crash, resulting in a denial of service. This issue only affected Ubuntu
25.04 and Ubuntu 25.10. (CVE-2026-37459)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | frr | 8.1-1ubuntu1.16 |
| Ubuntu · 24.04 LTS 24.04:LTS | frr | 8.4.4-1.1ubuntu6.7 |
| Ubuntu · 25.10 | frr | 10.4.1-3ubuntu1.4 |
| Ubuntu · 26.04 LTS 26.04:LTS | frr | 10.5.1-1ubuntu4.1 |