---
id: "CVE-2026-118593"
kind: "vulnerability"
aliases: ["CVE-2026-118593"]
title: "Red Hat Enterprise Linux 9 kernel: SRv6 packet drop path can stall system"
severity: "medium"
cvss: 5.9
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["infrastructure", "linux-kernel", "rhel", "self-hosted", "srv6"]
not_affected_if: ["no-srv6-tunnels", "rhel-10", "upstream-kernel"]
published_at: "2026-10-30T07:16:33+00:00"
first_seen_at: "2026-10-30T07:29:00+00:00"
updated_at: "2026-10-30T07:30:08+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118593", "first_seen_at": "2026-10-30T07:29:00+00:00"}]
---

# Red Hat Enterprise Linux 9 kernel: SRv6 packet drop path can stall system

An incomplete backport of an earlier kernel fix leaves bottom halves disabled when SRv6 packets are dropped in seg6_input_core(). This can starve softirq processing and cause a denial of service on systems with SRv6 tunnels configured.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the RHEL release with `cat /etc/redhat-release` and confirm whether it is 9.6 through 9.10.
- Check whether SRv6 tunnels are configured on the host (the sources do not name a specific command or file).

## Timeline

- 2026-10-30T07:29:00+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118593

## From the sources

A flaw was found in Red Hat Enterprise Linux 9 kernel builds. An incomplete backport of the CVE-2026-46099 fix in RHEL 9.6 through 9.10 left a local_bh imbalance in seg6_input_core(), where the drop path returns with bottom halves still disabled. This can lead to softirq starvation and denial of service on systems with SRv6 tunnels configured. Upstream and RHEL 10 are not affected.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_