CVE-2026-68144

A flaw was found in the Linux kernel's Phonet subsystem. When processing Phonet packets, a use-after-free vulnerability exists in the pep_get_sb() function. This occurs because the function does not correctly handle situations where packet data might be relocated in memory, leading to the use of an outdated memory address. A local attacker could exploit this to cause a system crash (denial of service) or potentially execute arbitrary code, leading to a compromise of the system.

This vulnerability is rated as Important severity for Red Hat Enterprise Linux because memory corruption via a kernel use-after-free can allow an unprivileged local user to compromise kernel integrity or cause a denial of service. The flaw resides in the handling of packet data relocation within the Phonet network protocol stack. While the underlying subsystem is present in standard kernel packages, Phonet is a legacy cellular protocol that is rarely configured or active in standard enterprise server environments, significantly limiting practical exposure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.