CVE-2026-43234

A flaw was found in the Linux kernel's team driver. A local user can exploit this vulnerability by manipulating network devices and namespaces. Specifically, when a slave device is unregistered from a team interface while a NETDEV_CHANGEMTU event is pending, it can lead to a deadlock or resource exhaustion. This can result in a denial of service, making the system unresponsive.

This vulnerability is rated as having a Moderate impact because exploitation requires local access with network administrative privileges to configure network namespaces and team interfaces, resulting in a denial of service rather than privilege escalation or code execution. In typical Red Hat Enterprise Linux deployments, network teaming is statically managed by system administrators, restricting potential exposure to configurations where untrusted users can establish isolated user namespaces. When triggered, the issue prevents the kernel from releasing network device reference counts, disrupting system availability while leaving data confidentiality and integrity intact.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.