CVE-2026-68117

A flaw was found in the Linux kernel's TIPC (Transparent Inter-Process Communication) protocol. A local attacker could exploit this vulnerability by repeatedly creating and failing to insert new sockets, causing the tipc_sk_create() function to leave a dangling pointer to a freed socket object. This use-after-free condition can lead to a system crash, resulting in a denial of service, or potentially allow for arbitrary code execution.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and extensive socket allocation to exhaust kernel resources before the condition can be triggered. The TIPC networking protocol is not loaded or active by default on standard Red Hat deployments, significantly limiting overall exposure. Successful exploitation requires an unprivileged local user to operate within a namespace capable of depleting the socket table, which can lead to a system crash or potential privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.