CVE-2026-72252

A flaw was found in the Linux kernel. A memory allocation failure during network filter operations can lead to an inconsistent state within the netfilter: nft_set_pipapo module. This inconsistency can result in out-of-bounds writes, which may allow a local attacker to cause a system crash (denial of service) or potentially execute arbitrary code with elevated privileges.

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires local access, elevated network configuration privileges (CAP_NET_ADMIN), and relies on triggering an uncommon memory allocation error during set operations. In standard Red Hat deployments, configuring nftables packet filtering rules is restricted to root or processes granted administrative capabilities, though unprivileged users could potentially reach the interface if user namespaces are enabled. While an inconsistent match state could allow out-of-bounds memory corruption leading to system instability or privilege escalation, the narrow failure preconditions limit the overall risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.