CVE-2026-72419

A flaw was found in the Linux kernel's netfilter component. This vulnerability arises from a type confusion due to an invalid pointer use within the nf_nat module when its initialization fails. A local attacker could exploit this issue by triggering the failed initialization, potentially causing a system crash and leading to a denial of service.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and is contingent upon an uncommon initialization failure condition within the built-in netfilter subsystem. Triggering the resulting memory corruption requires executing network filter hook operations on a kernel already operating in this degraded state, limiting the primary outcome to a localized denial of service. Earlier enterprise releases, including Red Hat Enterprise Linux 7 and 8, lack the relevant code paths and are unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.