Threats Tagged 'cve-2026-46244'

A vulnerability in the Linux kernel's netfilter nft_inner component causes a desynchronization of the IPv6 inner transport header offset. This flaw arises because the transport header offset computed by ipv6_find_hdr() is overwritten incorrectly, leading to a mismatch between the offset and the transport protocol. This can enable transport header forgery and potential firewall bypass. The issue affects stable Linux kernel versions starting from 6.2. Red Hat has released security updates addressing this vulnerability in their Enterprise Linux 9.6 and 10.0 Extended Update Support releases.

This Red Hat security advisory addresses multiple vulnerabilities and bugs in the Linux kernel packages for Red Hat Enterprise Linux 9.6 Extended Update Support. The update fixes 18 distinct security issues affecting various kernel subsystems including netfilter, ALSA, RDMA, TCP, SCTP, and others. The advisory also includes bug fixes and enhancements related to VLAN filtering, recursive locking, and secure storage access. The kernel is a critical component of the operating system, and these fixes address issues such as use-after-free, double free, race conditions, permission checking, and input validation errors. The update requires a system reboot to take effect.