CVE-2026-53245

A flaw was found in the Linux kernel's Multiple Registration Protocol (MRP) implementation. An issue in the mrp_pdu_parse_vecattr function, related to the incorrect parsing of vector attributes, can lead to the processing of spurious events or the corruption of the offset for subsequent Protocol Data Unit (PDU) parsing. This vulnerability may allow a remote attacker to cause unexpected network behavior or a denial of service.

This vulnerability is rated as Moderate severity because exploitation requires an interface with Multiple Registration Protocol (MRP) actively configured, which is not enabled by default in Red Hat Enterprise Linux. An attacker on the local network segment capable of transmitting malformed MRP packets could induce parsing errors, potentially causing state machine inconsistencies or service disruption to MRP-managed network links. Standard installations that do not utilize MRP or MVRP features are not exposed to this flaw during normal operation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.