CVE-2026-68397

A flaw was found in the Linux kernel's net/iucv module. The afiucv_hs_rcv() function fails to properly manage socket references. This allows a local attacker to trigger a use-after-free vulnerability by concurrently closing a socket while it is being processed. Successful exploitation can lead to a system crash, resulting in a denial of service.

Red Hat has evaluated this vulnerability as Moderate severity because it requires local access and precise timing to win a race condition, significantly limiting reliable exploitation. The underlying AF_IUCV communication layer is specific to IBM Z (s390x) architectures, so standard installations on other hardware platforms do not utilize this protocol. While an attacker who wins the race could dereference freed memory to cause a denial of service via kernel panic or potentially escalate privileges, the operational scope and complexity constrain the overall risk.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.