CVE-2026-64543

A flaw was found in the Linux kernel's Transparent Inter-Process Communication (TIPC) module. A use-after-free vulnerability exists in the tipc_disc_rcv() function, where the discoverer object can be prematurely freed while still being referenced. An unprivileged local user can exploit this flaw by interacting with the TIPCv2 generic netlink family, potentially causing a system crash and leading to a denial of service.

This vulnerability is rated Moderate because exploitation requires local access and interaction with TIPC UDP bearer configuration, which is not active by default in standard Red Hat Enterprise Linux deployments. The tipc kernel module is not loaded out of the box, substantially limiting default exposure across typical installations. However, on systems where the module is actively loaded or where unprivileged user namespaces allow creating network namespaces, a local attacker could trigger a use-after-free condition to crash the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.