CVE-2026-43339

A flaw was found in the Linux kernel's IPv6 networking subsystem. Specifically, a Use-after-Free (UaF) vulnerability exists within the addrconf_permanent_addr() function. This issue arises when the system attempts to access an IPv6 address after it has been freed, which could allow an attacker to cause a denial of service or potentially execute arbitrary code.

This vulnerability is rated as Moderate impact because exploitation requires local system access and relies on winning a race condition during network address lifecycle management. Under standard Red Hat Enterprise Linux installations, unprivileged users lack the administrative capabilities necessary to reconfigure network interfaces or trigger rapid address changes. Consequently, the practical risk is largely confined to a local denial of service through a kernel crash rather than arbitrary privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.