CVE-2026-72330

A flaw was found in the Linux kernel's TLS (Transport Layer Security) implementation. A remote attacker could send specially crafted zero-length TLS application data records. This could cause the system to repeatedly process these empty records, blocking all subsequent legitimate data on the connection and leading to a Denial of Service (DoS).

This vulnerability is rated as having Moderate impact because the failure only stalls affected individual network sockets rather than triggering a kernel crash or compromising host integrity. The flaw specifically affects the Linux kernel TLS (kTLS) subsystem when receiving empty records across socket read routines such as splicing. In typical Red Hat deployments, standard applications handle encryption within user-space libraries, so kTLS is neither enabled nor invoked by default, significantly reducing general exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.