CVE-2026-74260

A flaw was found in the Linux kernel's netfilter component, specifically within the nf_dup_netdev module. This vulnerability arises from an imbalanced decrementation of recursion counters when network packets are transmitted, particularly during a possible migration to a different CPU. This improper handling of recursion counters could lead to system instability or a denial of service (DoS).

This vulnerability is rated as having a Moderate impact because triggering the condition requires specific nftables configurations involving packet forwarding or duplication actions and can only lead to a denial of service without compromising system confidentiality or integrity. On standard Red Hat Enterprise Linux deployments, rules using netdev packet duplication or forwarding are not configured by default. Consequently, typical environments are unaffected unless an administrator or an unprivileged user with access to user namespaces explicitly configures these advanced netfilter rules.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.