CVE-2026-23164

A flaw was found in the rocker component of the Linux kernel. This memory leak vulnerability allows a local attacker with low privileges to repeatedly add and remove ports. This action prevents memory from being properly freed, leading to memory exhaustion and a denial of service (DoS) on the system.

A MODERATE impact memory leak flaw exists in the rocker component of the Linux kernel. A local attacker with low privileges can exploit this by repeatedly adding and removing ports, leading to memory exhaustion and a denial of service. This affects Red Hat Enterprise Linux 7, 8, 9, 10 and Red Hat In-Vehicle OS 2. Red Hat Enterprise Linux 6 is not affected as the vulnerable code is not present.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If the rocker kernel module is not required for system operation, it can be prevented from loading to mitigate this vulnerability. To blacklist the rocker module, create a configuration file:

echo "blacklist rocker" | sudo tee /etc/modprobe.d/blacklist-rocker.conf

After creating the file, regenerate the initramfs and reboot the system for the changes to take effect. This may impact functionality if the rocker module is actively used by network devices.