CVE-2026-72127

A flaw was found in the Linux kernel's netdev-genl component. A local user in a child process ID (PID) namespace can issue a NETDEV_CMD_NAPI_GET command. This allows the user to observe the global PID of a NAPI kernel thread, even though the thread should not be visible within their PID namespace. This could lead to an information disclosure, potentially bypassing PID namespace isolation.

This vulnerability is rated as having a Low impact because the information exposed is restricted to the host-level process identifier of an internal NAPI kernel thread. An unprivileged local user executing within a container or child process namespace cannot leverage this observed PID to alter system memory, disrupt services, or elevate privileges directly. Consequently, this flaw represents an isolated information disclosure that carries negligible operational risk for standard Red Hat Enterprise Linux environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.