{"id":6869,"date":"2026-09-04T18:49:20","date_gmt":"2026-09-04T10:49:20","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-72249"},"modified":"2026-09-04T18:49:20","modified_gmt":"2026-09-04T10:49:20","slug":"cve-2026-72249","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-72249","title":{"rendered":"CVE-2026-72249 [CRITICAL] &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: flowtable:"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>netfilter: flowtable: use dst in this direction when pushing IPIP header<\/p>\n<p>When pushing the IPIP header, the route of the other direction is used<br \/>\nto calculate the headroom, use the route in this direction. Accessing<br \/>\nthe other tuple to set the IP source and destination is fine because<br \/>\nthis tuple does not provide such information to avoid storing redundant<br \/>\ninformation. However, this tuple already provides the dst for this<br \/>\ndirection, this went unnoticed because this bug affects headroom and<br \/>\niph-&gt;frag_off only at this stage.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>netfilter: flowtable: use dst in this direction when pushing IPIP header<\/p>\n<p>When pushing the IPIP header, the route of the other dire<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-6869","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/6869","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6869"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6869"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6869"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}