CVE-2026-46306

A flaw was found in the Linux kernel's flow dissector. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted Point-to-Point Protocol over Ethernet (PPPoE) Protocol Field Compression (PFC) frame to an affected system. The incorrect processing of these compressed frames leads to a memory misalignment, which can result in a kernel crash on certain architectures.

PPPoE PFC frames can make the PPP payload start at a one byte shifted offset, which can leave the network header misaligned for the flow dissector. On strict alignment architectures such as MIPS, a crafted L2 frame can trigger an unaligned access exception in __skb_flow_dissect and crash the kernel. For the CVSS the PR:N is used because the attacker does not need privileges on the victim and only needs adjacent network reachability to the Ethernet interface. The issue is not Internet routed in the normal case and usually requires access to the same local Ethernet segment or another adjacent network path. Impact is denial of service via kernel crash, with no supported evidence of information disclosure or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.