CVE-2026-80733
Description
A flaw was found in the Linux kernel's networking component. When processing network packets via raw or packet sockets over virtual devices, the sk_mc_loop() function could incorrectly trigger a WARN_ON_ONCE() message. This occurred because the function did not properly handle non-INET (Internet Protocol) socket families, leading to an unexpected diagnostic warning in the system logs.
Statement
This vulnerability is rated as having a Low impact because triggering the condition merely generates a benign diagnostic kernel warning in system logs, without causing memory corruption, privilege escalation, or disruption of network services under default configurations. Exploitation requires local access with the ability to transmit traffic through raw or packet sockets over virtual network interfaces such as VRF or IPVLAN. In default Red Hat Enterprise Linux environments, panic-on-warning is disabled, preserving overall system stability and availability.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
