CVE-2026-74744

A flaw was found in the Linux kernel's ipvlan component. The ipvlan devices do not properly inherit needed_headroom and needed_tailroom from the physical device (phy_dev). This can lead to insufficient space being reserved for packet headers and trailers, potentially causing memory corruption, such as KASAN slab-use-after-free crashes, and resulting in a denial of service.

This vulnerability is rated as an Important severity because kernel buffer memory corruption within network packet handling routines can cause system crashes or potential privilege escalation. In standard Red Hat Enterprise Linux deployments, the ipvlan driver is not enabled or utilized by default. Exploitation requires an administrator or privileged container runtime to configure IPVLAN interfaces layered above network devices that demand additional header or trailer space, such as IPsec, WireGuard, or tunneling protocols.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.