CVE-2026-46323

A flaw was found in the Linux kernel's Generic Receive Offload (GRO) networking subsystem. This vulnerability occurs when skb_gro_receive() attempts to merge zerocopy socket buffers (skbs) without properly managing page reference counts, specifically when the SKBFL_MANAGED_FRAG_REFS flag is set. An attacker could potentially exploit this to trigger a Use-After-Free (UAF) condition, which is a memory corruption vulnerability that can lead to system instability or potentially arbitrary code execution.

This is an Important flaw in the Linux kernel's Generic Receive Offload (GRO) networking subsystem. The vulnerability, a variant of Fragnesia, stems from improper management of page reference counts when merging zerocopy socket buffers. An attacker could exploit this Use-After-Free condition to achieve arbitrary code execution or cause system instability on affected Red Hat Enterprise Linux and OpenShift Container Platform systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.