Skip to main content
CVE-2026-99121VulnerabilityPublished

fib_rebalance · ipv4: avoid divide by zero

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-99121· Medium

Not known to be exploited · fixed in d5520e815c4b1427104ce1428ee23821f2aa824d : update Microsoft when convenient.

Data as of 29 Oct 2026, 11:49 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in d5520e815c4b1427104ce1428ee23821f2aa824d, 5046d2880fec7d49ebed2fd2866747ee1d06ad71, 5dac5c7ba8f5f3fb4bf29f2a2c3cb552f5b83c8f

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 28 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 29 Oct 2026.

What to do

Upgrade Linux to d5520e815c4b1427104ce1428ee23821f2aa824d, 5046d2880fec7d49ebed2fd2866747ee1d06ad71 or 5dac5c7ba8f5f3fb4bf29f2a2c3cb552f5b83c8f.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 0e884c78ee19e902f300ed147083c28a0c6302f0, < d5520e815c4b1427104ce1428ee23821f2aa824d
Fixed in
  • d5520e815c4b1427104ce1428ee23821f2aa824d
LinuxLinuxAffected
  • ≥ 0e884c78ee19e902f300ed147083c28a0c6302f0, < 5046d2880fec7d49ebed2fd2866747ee1d06ad71
Fixed in
  • 5046d2880fec7d49ebed2fd2866747ee1d06ad71
LinuxLinuxAffected
  • ≥ 0e884c78ee19e902f300ed147083c28a0c6302f0, < 5dac5c7ba8f5f3fb4bf29f2a2c3cb552f5b83c8f
Fixed in
  • 5dac5c7ba8f5f3fb4bf29f2a2c3cb552f5b83c8f
LinuxLinuxAffected
  • =4.4
Fixed in–

Description

A vulnerability identified as CVE-2026-99121 affects Microsoft software version 3.0, involving a divide by zero issue in the IPv4 fib_rebalance component. The vulnerability has been published but lacks detailed technical or impact information and no CVSS score is available.

References

Community reviews

Loading reviews…