CVE-2026-80733

A flaw was found in the Linux kernel's networking component. When processing network packets via raw or packet sockets over virtual devices, the sk_mc_loop() function could incorrectly trigger a WARN_ON_ONCE() message. This occurred because the function did not properly handle non-INET (Internet Protocol) socket families, leading to an unexpected diagnostic warning in the system logs.

This vulnerability is rated as having a Low impact because triggering the condition merely generates a benign diagnostic kernel warning in system logs, without causing memory corruption, privilege escalation, or disruption of network services under default configurations. Exploitation requires local access with the ability to transmit traffic through raw or packet sockets over virtual network interfaces such as VRF or IPVLAN. In default Red Hat Enterprise Linux environments, panic-on-warning is disabled, preserving overall system stability and availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.