CVE-2026-46260

A flaw was found in the Linux kernel's IPv6 networking subsystem. This vulnerability, an out-of-bound read, occurs during the creation of an IPv6 route with specific parameters. A local attacker could exploit this flaw to cause memory corruption, potentially leading to system instability or a denial of service. This issue impacts the reliability and availability of the affected system.

This vulnerability is rated as Moderate impact because exploiting it requires local privileges to configure network routing, confining the threat to authenticated users or containers with network administrative capabilities. A privileged local attacker could submit a malformed route configuration over netlink to trigger an out-of-bounds read within the kernel, leading to a system crash and denial of service. Red Hat Enterprise Linux releases are not affected because the vulnerable code introduced in recent upstream stable kernels is not present.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.