CVE-2026-68323

A flaw was found in the Linux kernel's TIPC (Transparent Inter-Process Communication) module. A race condition exists in the handling of UDP bearer replicast list updates. This can occur when tipc_udp_rcast_add() and cleanup_bearer() functions attempt to update the list concurrently without proper serialization. An unprivileged local user can exploit this flaw to trigger a kernel bug, leading to a system crash and a denial of service.

This vulnerability is rated as Moderate impact because successful exploitation requires local access and precise timing to trigger list corruption during bearer cleanup, resulting primarily in a kernel crash and denial of service. The TIPC kernel module is not loaded by default on Red Hat Enterprise Linux. Systems are exposed only if TIPC networking is actively enabled or if unprivileged users have access to create user namespaces to configure network bearers.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.