CVE-2026-72253

A flaw was found in the Linux kernel's Netfilter Session Initiation Protocol (SIP) connection tracking helper. This vulnerability occurs when network traffic control (tc ingress) or Open vSwitch (openvswitch) subsystems are active, and a specific media handling feature (sip_external_media) is enabled. The system fails to properly verify network routing information, which can lead to the sip_external_media feature being unintentionally disabled, impacting its intended operation.

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation requires a non-default configuration alongside specific networking subsystem interaction. The flaw can only be triggered when the Netfilter SIP connection tracking helper is explicitly configured with the sip_external_media parameter enabled in conjunction with Open vSwitch or traffic control ingress queues. In default deployments, this module parameter is disabled, preventing standard packet processing flows from encountering the unvalidated routing access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.