CVE-2026-64410

A flaw was found in the Linux kernel's netfilter component, specifically concerning the handling of IPIP (IP-in-IP) tunnel hardware offload. The system attempts to utilize hardware offload for IPIP tunnels, a feature not yet supported by existing drivers. A remote attacker could potentially exploit this unsupported operation, leading to a denial of service, compromise of data integrity, or disclosure of sensitive information due to the improper processing of network traffic.

This vulnerability is rated as Moderate severity because it requires an uncommon configuration where netfilter flowtable hardware offload is explicitly enabled on interfaces processing IPIP tunnel traffic. Hardware offloading for flowtables is not configured by default in standard Red Hat Enterprise Linux installations. Furthermore, older releases such as RHEL 8 and RHEL 9 do not include the affected implementation and are not vulnerable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.