CVE-2026-53014

A flaw was found in the Linux kernel. When the kernel's traffic control (TC) subsystem processes network packets for redirection across different types of network devices, it can incorrectly handle packet headers. This can lead to corruption of network packet data. A local attacker could potentially exploit this to cause the system to crash, resulting in a denial of service (DoS).

This vulnerability is rated as having Moderate severity because triggering the issue requires local access with network configuration privileges (or unprivileged user namespaces) to define traffic control redirection across diverse interface types, restricting the impact to denial of service. Under default configurations in Red Hat Enterprise Linux, systems do not automatically route packets through heterogeneous traffic control blocks. An attacker must specifically craft and apply redirection rules combining devices like tunnels and virtual ethernet pairs to induce buffer header exhaustion and force a kernel panic. Consequently, confidentiality and integrity are not compromised.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.