Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

Vulnerability Reference: A flaw was found in kronosnet's dynamic link validation process where it fails to safely verify packet origins, permitting an access control list (ACL) bypass via ID spoofing.

Component / Vulnerable Part: kronosnet -> Access Control List (ACL) engine for dynamic link handling (https://github.com/kronosnet/kronosnet/).

Technical Analysis & Root Cause: When kronosnet is configured to utilize dynamic links (allowing connections from any source IP address), it relies on an internal ACL structure mapped to internal link identifiers. A logical flaw exists within the dynamic packet processing pipeline where the authentication routine implicitly trusts the incoming frame's source payload metadata to determine the link ID. The validation logic does not cryptographically or cryptanalytically challenge the source identifier. Consequently, an adversary can craft network packets with a spoofed link ID matching an authorized node context, tricking the parser into circumventing ACL constraints.

Impact: A remote, unauthenticated attacker can exploit this flow to inject arbitrary data packets directly into the kronosnet interface. Depending on how the upper-layer application processes unexpected or untrusted data, this can trigger packet corruption or structural runtime instability.