CVE-2026-68334

A flaw was found in the Linux kernel's rxrpc component. A race condition in the rxrpc_wake_up_io_thread() function could lead to a null pointer dereference. This occurs when the io_thread pointer is checked and then reloaded, and if the I/O thread exits between these operations, the second load can result in a null value. This vulnerability could cause a system crash, leading to a Denial of Service (DoS).

This vulnerability has been assessed as Moderate impact. The race condition in rxrpc_wake_up_io_thread() was introduced in upstream kernel version 6.16.0. Red Hat Enterprise Linux is not affected, as the newest RHEL kernel (6.12.x in RHEL 10) predates the introduction of the vulnerable code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.