Critical Denial of Service Vulnerability in FRRouting Package
Summary
ALSA-2026:24340: Important: frr security update. Affects frr versions < 7.5.1-24.el8_10. Fixed in 7.5.1-24.el8_10. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FRRouting (frr) is an open-source software suite that provides implementations of various TCP/IP routing protocols, including BGP, OSPF, and RIP. It is widely used in network environments to manage routing and ensure efficient data flow. The package is essential for network administrators and engineers who require robust routing capabilities. However, it has been identified that certain components of FRRouting are susceptible to crafted inputs that can lead to a denial of service, impacting network availability.
Vulnerability Detail
The vulnerability identified as CVE-2026-37457 allows an attacker to exploit a crafted FlowSpec component within the FRRouting package. This exploitation can lead to a denial of service, where the affected system becomes unresponsive or crashes, disrupting network operations. The issue arises from improper handling of specific inputs, making it crucial for users to apply the necessary updates to mitigate the risk.
How To Fix
Minimum fixed version
7.5.1-24.el8_10
This is the first release that contains the fix.
sudo dnf update frrTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds provided for this vulnerability. The best course of action is to apply the available security update as soon as possible.
Conclusion
The FRRouting package has a critical vulnerability (CVE-2026-37457) that can lead to denial of service. Users are strongly advised to update to the latest patched version to secure their systems. Regular monitoring and prompt updates are essential for maintaining network integrity.
See every vulnerability recorded for frr →
FAQ
CVE-2026-37457 is a security vulnerability in the FRRouting package that allows for denial of service through crafted FlowSpec components.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to a denial of service, causing the affected system to become unresponsive, which can disrupt network operations.
Yes, a patch is available in version 7.5.1-24.el8_10 of the FRRouting package. Users should update to this version to mitigate the vulnerability.
While there are no specific workarounds, it is recommended to monitor the system closely and apply the update as soon as possible to avoid potential exploitation.
Related vulnerabilities
Recent vulnerabilities recorded for frr.
