CVE-2026-45844

A flaw was found in the Linux kernel's netfilter ARP (Address Resolution Protocol) tables. When processing IPv4-over-IEEE1394 ARP packets on IEEE1394 interfaces, the kernel incorrectly parses the ARP payload. This can lead to incorrect filtering decisions by arptables, where packets that should be accepted may be dropped, and vice versa, resulting in a Denial of Service (DoS). Furthermore, attempts to mangle target hardware or IP addresses in IEEE1394 ARP packets can cause packet corruption, also leading to a Denial of Service.

Red Hat has evaluated this vulnerability as Moderate because it specifically targets IPv4 traffic over IEEE 1394 (FireWire) interfaces, an uncommon network configuration in standard enterprise deployments. Even on systems where FireWire hardware is present, exploitation requires active arptables filtering or packet mangling rules to be configured on the interface. The consequences are confined to traffic disruption and dropped packets on the affected link, with no direct risk of privilege escalation or host memory compromise.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.