CVE-2026-64190

A flaw was found in the Linux kernel's team driver. A local attacker with CAP_NET_ADMIN capabilities could exploit a race condition during a team device mode change. This occurs when the __team_change_mode() function clears internal operation pointers before safely restoring them, while the team_xmit() function concurrently attempts to transmit data. This can lead to a NULL pointer dereference, causing the kernel to crash and resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.