CVE-2026-72253

Summary

In the Linux kernel, the following vulnerability has been resolved:

netfilter: nf_conntrack_sip: validate skb_dst() before accessing it

tc ingress and openvswitch do not guarantee routing information to be available. These subsystems use the conntrack helper infrastructure, and the SIP helper relies on the skb_dst() to be present if sip_external_media is set to 1 (which is disabled by default as a module parameter).

This effectively disables the sip_external_media toggle for these subsystems without resulting in a crash.

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxcae3a2627520c3795b54533c5328b77af3405dbe < e64a48c50a1ff565a98c6a98d82b5b942868e76eaffected
LinuxLinuxcae3a2627520c3795b54533c5328b77af3405dbe < c199ed687c00841daf60e9d131976958583a8c09affected
LinuxLinuxcae3a2627520c3795b54533c5328b77af3405dbe < 09755dc62b026076b1d47f83489eb0547c8135e0affected
LinuxLinuxcae3a2627520c3795b54533c5328b77af3405dbe < b843a96252f672332837ea2ecb7c8db0acf68e20affected
LinuxLinuxcae3a2627520c3795b54533c5328b77af3405dbe < e5e24a365a5e024efef63cc49abb345fbd4852c5affected
LinuxLinux4.3affected
LinuxLinux0 < 4.3unaffected
LinuxLinux6.6.148 <= 6.6.*unaffected
LinuxLinux6.12.101 <= 6.12.*unaffected
LinuxLinux6.18.42 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References