PulseLinuxLINUX UPDATE INTELLIGENCE
CVE Database›Document archive›CVE-2026-68338

CVE-2026-68338

kernel: net/packet: avoid fanout hook re-registration after unregister

Loading…

Severity

Moderate

Red Hat Product Security

7

CVSS 3.1

Review impact separately from score.

Published · August 10, 2026

Updated · October 29, 2026

Description

A flaw was found in the Linux kernel's net/packet subsystem. A race condition can occur during the re-registration of a fanout hook after a network device has been unregistered. This issue arises when the packet_set_ring() function attempts to re-add a fanout hook based on a stale state, potentially leading to an inconsistent system state and a denial of service (DoS).

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition