CVE-2026-72429

A flaw was found in the Linux kernel's IPv6 In-situ Operations, Administration, and Maintenance (IOAM) subsystem. This vulnerability arises from a type confusion where a dummy network destination entry (dst_entry) is incorrectly handled as a routing information structure (rt6_info). When this dummy entry is stored in the IOAM Lightweight Tunnel (LWT) state and passed to functions expecting a full rt6_info structure, it leads to an invalid cast. This can result in an invalid pointer access, potentially causing system instability or a denial of service.

Red Hat Product Security rates the severity of this vulnerability as Moderate because exploitation is limited to causing a denial of service through an unexpected kernel crash, with no loss of system confidentiality or integrity. Triggering this condition requires local access and the necessary privileges to configure or interact with IPv6 IOAM lightweight tunnels. Furthermore, supported Red Hat Enterprise Linux releases are not affected, as the introducing upstream code is not present in their respective kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.