CVE-2026-72251

A flaw was found in the Linux kernel's netfilter subsystem, specifically within the Session Initiation Protocol (SIP) Network Address Translation (NAT) helper. This vulnerability occurs when a cloned packet buffer (SKB) is reallocated, but the system fails to update the data pointer, leading to the use of stale data. This can result in header corruption or incorrect packet manipulation, potentially allowing an attacker to cause a denial of service or other network instability.

This flaw is rated as Important because network traffic traversing a gateway can trigger stale memory access leading to denial of service or potential kernel corruption. Red Hat Enterprise Linux systems are not exposed in standard configurations because the Session Initiation Protocol (SIP) NAT helper module is not loaded by default. Exploitation requires the host to actively inspect and translate SIP traffic using the affected netfilter helper module.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.