CVE-2026-46306

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the net/core/flow dissector.c module of the Linux kernel related to the processing of PPPoE frames using Protocol Field Compression (PFC). When a compressed 1-byte protocol field is used, the subsequent PPP payload is shifted by one byte, leading to a 4-byte misalignment of the network header. On certain architectures, such as MIPS, this causes an unaligned access exception in the skb flow dissect() function, which can be triggered by sending a PPPoE PFC frame to an ethernet interface with RPS enabled. This flaw can be exploited by a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict the processing of PPPoE PFC frames to reduce the attack surface.