CVE-2026-72125

A flaw was found in the Linux kernel's Controller Area Network (CAN) ISO-TP protocol. A memory corruption vulnerability, specifically a use-after-free race condition, can occur during the unregistration of a network device. This happens when the system attempts to free a socket while a CAN filter still references it. A local attacker could potentially exploit this to cause a system crash (denial of service) or execute arbitrary code.

This vulnerability is rated as Moderate for Red Hat Enterprise Linux because exploitation requires local system access, high timing precision to win a race condition during network interface removal, and the active use of CAN ISO-TP networking. In standard enterprise configurations, CAN hardware and the associated ISO-TP protocol layer are rarely enabled or used, substantially restricting practical attack vectors. An unprivileged local user would need specific network operations and timing windows to trigger the stale filter reference and crash the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.