CVE-2026-68335

A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) component. The RDS component incorrectly handles incoming messages that cross network namespace boundaries, allowing a sender in one network namespace to deliver a message to a socket in a different network namespace. This can lead to a use-after-free vulnerability when the sender's network namespace is removed, freeing the associated connection while the receiving socket still holds a reference. A local unprivileged attacker can exploit this to achieve information disclosure or potentially execute arbitrary code.

This vulnerability is rated as having an Important impact because an unprivileged local attacker capable of creating user and network namespaces can trigger a use-after-free condition in kernel memory, potentially leading to local privilege escalation or system crashes. On default Red Hat Enterprise Linux installations, the Reliable Datagram Sockets (RDS) protocol module is not loaded unless explicitly configured or required by specialized clustered workloads. Systems where RDS is not in active use or where unprivileged user namespaces are restricted have significantly lower overall exposure to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.