CVE-2026-64414

A flaw was found in the Linux kernel's netfilter subsystem. This vulnerability occurs when the u32 module processes network packets containing unreadable fragments, leading to improper handling of these fragments. A remote attacker could exploit this flaw by sending specially crafted network traffic, potentially causing a denial of service (DoS) on the affected system.

Unreadable skb fragments can reach netfilter paths that still assume skb_copy_bits can access the full packet data. When such a packet is processed by xt_u32, NFQUEUE, NFLOG, or IPv6 conntrack reassembly, skb_copy_bits may fail and the old code can hit a reachable BUG path, causing a kernel panic. For the CVSS the PR:N is used because a remote sender does not need a local account when the affected packet path is exposed and the system is configured to produce unreadable skb fragments. The issue is network reachable in deployments using devmem TCP or similar unreadable fragment support together with affected netfilter features. Impact is denial of service via kernel crash. No concrete UAF, OOB write, information leak, or privilege escalation primitive is visible from the patch context.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.