Description
An issue was discovered in bgpd in FRRouting (FRR) 8.3. In bgp_notify_send_with_data() and bgp_process_packet() in bgp_packet.c, there is a possible use-after-free due to a race condition. This could lead to Remote Code Execution or Information Disclosure by sending crafted BGP packets. User interaction is not needed for exploitation.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | frr | 8.4.1-1 | — |
| Debian 13 | frr | 8.4.1-1 | — |
| Debian 12 | frr | 8.4.1-1 | — |
| Debian 11 | frr | 7.5.1-1.1+deb11u3 | DLA-3865-1 |
| Debian 10 | frr | 7.5.1-1.1+deb10u2 | DLA-3797-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 22.04 LTS | frr | 8.1-1ubuntu1.2 | USN-5685-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 20.04 LTS | frr | 7.2.1-1ubuntu0.2+esm2 | USN-6807-1 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP4 | frr | 7.4-150300.4.10.1 | SUSE-SU-2022:4130-1 |
| SLES 15 SP3 | frr | 7.4-150300.4.10.1 | SUSE-SU-2022:4130-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | frr | 8.4-1.1 | openSUSE-SU-2024:12516-1 |
| openSUSE Leap 15.4 | frr | 7.4-150300.4.10.1 | SUSE-SU-2022:4130-1 |
| openSUSE Leap 15.3 | frr | 7.4-150300.4.10.1 | SUSE-SU-2022:4130-1 |
Advisories 6
- USN-6807-1 frr vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-5685-1 frr vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- DLA-3865-1 frr - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-3797-1 frr - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2022:4130-1 Security update for frr SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:12516-1 frr-8.4-1.1 on GA media SUSE / openSUSE Security Updates · May 7, 2025