In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use correct direction to set up tunnel route The layer 2… (CVE-2026-72246)
A medium severity vulnerability in the Linux kernel's netfilter flowtable component was resolved. The flaw involved using an incorrect direction when setting up tunnel routes, causing layer 2 encapsulation and layer 3 tunnel information in the transmit path to be derived from the wrong tuple. The patch corrects the direction used and removes a redundant reference check in the direct transmit path.
AI Analysis
Technical Summary
This vulnerability in the Linux kernel's netfilter flowtable component pertained to the incorrect use of direction when setting up tunnel routes. Specifically, the layer 2 encapsulation and layer 3 tunnel information in the transmit path were taken from an incorrect tuple due to this directional error. The fix involved correcting the direction used for tunnel route setup and removing a redundant check related to reference dropping in the direct transmit path. This resolves the inconsistency and potential misrouting within the kernel's network packet processing.
Potential Impact
The vulnerability could cause incorrect handling of network packets within the kernel's netfilter flowtable, potentially affecting the integrity of tunnel routing and encapsulation. This may lead to unexpected network behavior or packet misrouting. No known exploits in the wild have been reported.
Mitigation Recommendations
A patch has been applied to the Linux kernel to correct the direction used in tunnel route setup and remove redundant checks. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory for current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: netfilter: flowtable: use correct direction to set up tunnel route The layer 2… (CVE-2026-72246)
Description
A medium severity vulnerability in the Linux kernel's netfilter flowtable component was resolved. The flaw involved using an incorrect direction when setting up tunnel routes, causing layer 2 encapsulation and layer 3 tunnel information in the transmit path to be derived from the wrong tuple. The patch corrects the direction used and removes a redundant reference check in the direct transmit path.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in the Linux kernel's netfilter flowtable component pertained to the incorrect use of direction when setting up tunnel routes. Specifically, the layer 2 encapsulation and layer 3 tunnel information in the transmit path were taken from an incorrect tuple due to this directional error. The fix involved correcting the direction used for tunnel route setup and removing a redundant check related to reference dropping in the direct transmit path. This resolves the inconsistency and potential misrouting within the kernel's network packet processing.
Potential Impact
The vulnerability could cause incorrect handling of network packets within the kernel's netfilter flowtable, potentially affecting the integrity of tunnel routing and encapsulation. This may lead to unexpected network behavior or packet misrouting. No known exploits in the wild have been reported.
Mitigation Recommendations
A patch has been applied to the Linux kernel to correct the direction used in tunnel route setup and remove redundant checks. Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the provided data; therefore, check the vendor advisory for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-466f-hmcc-89x2
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-72246"]
Threat ID: 6a808b73bf8831d5394fdd56
Added to database: 08/15/2026, 15:53:23 UTC
Last enriched: 08/23/2026, 11:20:30 UTC
Last updated: 09/29/2026, 16:54:26 UTC
Views: 20
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.