Live › vulnerability › CVE-2026-118593
An incomplete backport of an earlier kernel fix leaves bottom halves disabled when SRv6 packets are dropped in seg6_input_core(). This can starve softirq processing and cause a denial of service on systems with SRv6 tunnels configured.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-30 07:29 UTC. All times on this page are UTC.
Systems running Red Hat Enterprise Linux 9.6 through 9.10 kernel builds that have SRv6 tunnels configured are exposed. Upstream kernels and RHEL 10 are not affected according to the description, so those systems can skip it.
No product ranges from the sources yet.
cat /etc/redhat-release and confirm whether it is 9.6 through 9.10.No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a local_bh imbalance in seg6_input_core(), where the drop path returns with bottom halves still disabled. This can lead to softirq starvation and denial of service on systems with SRv6 tunnels configured. Upstream and RHEL 10 are not affected.
This page as .md · .json · in your agent: get_signal("CVE-2026-118593")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.