CVE-2026-64418

A flaw was found in the Linux kernel's memory management (mm) shrinker subsystem. A race condition exists where the shrinker_info array can be prematurely freed while still accessible, leading to a use-after-free or double-free vulnerability. This memory corruption can be exploited by a local attacker to cause system instability or a denial of service.

This vulnerability is rated as Moderate because successful exploitation requires local user access and depends on winning a complex race condition during memory cgroup allocation failure. The flaw is confined to core memory management routines and can lead to a system crash or denial of service rather than arbitrary code execution. Earlier enterprise releases such as Red Hat Enterprise Linux 8 and 9 are not vulnerable as they do not contain the affected code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.