Vulnerability in Linux Kernel Affecting Raw Sockets Functionality

CVE-2026-46266

What is CVE-2026-46266?

A identified vulnerability in the Linux kernel arises from improper handling of raw sockets with the IPPROTO_RAW protocol setting. When a RAW socket is established on protocol 255, malicious ICMP packets can be crafted to exploit this socket. This allows attackers to instigate unwanted changes in the Forwarding Network Header Extension (FNHE) cache. As a result, critical network functions could be disrupted. To mitigate this threat, incoming ICMP packets must be dropped if they match this socket configuration, thus protecting the integrity and security of the network communications.

References