PT-2026-72437

CVE-2026-72249

·

Published

2026-08-15

·

Updated

2026-11-11

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the netfilter flowtable component when pushing the IPIP header. The system incorrectly uses the route of the opposite direction to calculate the headroom instead of the route for the current direction. This flaw specifically impacts the headroom and the iph->frag off variable during this stage of processing.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
USN-8816-1
USN-8816-2
USN-8816-3
USN-8816-4
USN-8888-1
USN-8888-2
USN-9003-1
USN-9043-1
Found an issue in the description? Have something to add? Feel free to write us 👾