CVE-2026-72416

A flaw was found in the Linux kernel's netfilter component, specifically within the nft_compat layer. This vulnerability allows the ebtables emulation to process network traffic targets that it should normally reject. This oversight can lead to incorrect application of network filtering rules, potentially allowing unauthorized network access or bypassing intended security policies.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation is restricted to local environments where an attacker requires elevated privileges, such as network administrative capabilities, to manipulate netfilter configurations. Due to improper handling of target verdicts within the compatibility translation layer, ebtables bridge rules can inadvertently permit invalid targets, resulting in unexpected rule behavior or a localized denial of service. Because standard production deployments do not expose network configuration interfaces to unprivileged remote actors, the risk is contained to local users capable of defining custom bridge filtering rules.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.