CVE-2026-64188
kernel: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink()
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 20, 2026
Updated · October 20, 2026
Description
A flaw was found in the Qualcomm rmnet driver within the Linux kernel. The rmnet_dellink() function improperly frees an endpoint while Read-Copy-Update (RCU) readers may still hold a reference to it. This use-after-free vulnerability allows a local attacker to trigger a system crash, resulting in a denial of service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference