CVE-2026-46244

A flaw was found in the Linux kernel's netfilter subsystem, specifically within the nft_inner module. This vulnerability arises from an incorrect handling of IPv6 inner packet processing, where the transport header offset (inner_thoff) becomes desynchronized from the Layer 4 protocol (l4proto). A remote attacker could exploit this desynchronization to perform transport header forgery, potentially leading to a firewall bypass and allowing unauthorized network access.

This is an Important flaw in the Linux kernel's netfilter subsystem, affecting Red Hat Enterprise Linux systems that process IPv6 inner packets. A remote attacker could exploit a desynchronization issue in the nft_inner module to forge transport headers, potentially bypassing firewall rules and gaining unauthorized network access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.