CVE-2026-72034

A flaw was found in the Linux kernel's file handle (fhandle) mechanism. A local attacker could exploit a vulnerability in the capable_wrt_mount() function, which incorrectly handles detached mounts. By performing specific operations, an attacker could trigger a null pointer dereference, leading to a system panic and causing a Denial of Service (DoS) on the affected system.

This vulnerability is rated as Moderate impact because exploitation requires an authenticated local user executing specific filesystem system calls to trigger a race condition during mount namespace teardown. The flaw results strictly in a kernel panic leading to system denial of service, without enabling privilege escalation or data exposure. Earlier releases, including Red Hat Enterprise Linux 7 and 8, do not contain the affected capability validation logic and are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.