CVE-2026-53341

A flaw was found in the Linux kernel. This vulnerability, a Use-After-Free (UAF), occurs in the fhandle component when the may_decode_fh() function accesses mount namespace information without proper locking. This creates a race condition that could be exploited by an attacker. The most severe consequence is a kernel crash, leading to a Denial of Service (DoS), but it could also result in an endless loop or the disclosure of sensitive information.

Red Hat has evaluated this issue as having Moderate severity because exploitation requires local system access and winning a tight race condition between unmounting a cloned mount tree and decoding file handles. An attacker would need specific execution timing to trigger the race condition, which primarily leads to a system crash resulting in a denial of service, though memory disclosure may also be possible. The prerequisites of local authentication and the difficulty of reliably hitting the concurrency window limit the overall risk in standard deployments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.