CVE-2026-68377

A flaw was found in the Linux kernel's act_tunnel_key module, which manages network traffic tunneling. A race condition, where multiple operations occur in an unpredictable order, can lead to a use-after-free vulnerability. This allows a local attacker to corrupt memory, potentially causing the system to crash and resulting in a denial of service (DoS).

This Moderate-impact flaw in the Linux kernel's act_tunnel_key network scheduling component could lead to a system crash due to a race condition in memory management. Exploitation requires specific network configurations to trigger the use-after-free vulnerability, resulting in a Denial of Service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.