In the Linux kernel, nft_inner_parse_l2l3() incorrectly overwrites the transport header offset for inner IPv6 packets, causing a desynchronization between the actual header location and the protocol identifier. This flaw can be abused to forge transport-layer headers and evade firewall rules, allowing malicious traffic to be accepted as legitimate. The vulnerability does not directly reveal data but permits an attacker to subvert packet filtering. This flaw corresponds to CWE‑823.

All stable Linux kernel releases from version 6.2 onward are affected, as the issue resides in the core netfilter module. No specific vendor patches are listed beyond the kernel update requirement.

Based on the supplied metrics, the flaw scores a CVSS of 9.1, indicating a high severity. The EPSS score is < 1%, portraying a very low likelihood of exploitation, and the vulnerability is absent from the CISA KEV catalog. The CVE description notes that the desynchronization between inner_thoff and l4proto can lead to transport header forgery and firewall bypass, but the exact attack vector—such as whether an attacker needs direct network access or can exploit the issue from a remote source—is not explicitly described in the official data. Consequently, while the potential impact includes bypassing firewall rules, the specific exploitation technique remains unspecified.