CVE-2026-72248

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter flowtable when using IPIP tunnels with direct xmit, such as with a bridge device. The problem occurs because no dst entry is provided to verify the skb headroom and set the iph->frag off field, leading to invalid destination usage. This can trigger a system crash in the tunnel transmit path. The flaw involves the nft flow dst release() and nf flow dst check() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.