CVE-2026-72417

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the netfilter flowtable component where the nf flow ip4 tunnel proto() function fails to validate the iph->ihl field. This lack of sanity checking when computing the header size can lead to out-of-bounds access when processing malformed IP headers. Additionally, the function incorrectly used a hardcoded IPPROTO IPIP constant instead of iph->protocol when setting ctx->tun.proto and failed to reference ctx->tun.hdr size when updating ctx->offset.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.