CVE-2026-72322

A flaw was found in the Linux kernel's IPv6 multicast (mcast) component. A race condition exists during the teardown of a network device and the processing of incoming Multicast Listener Discovery (MLD) queries. This can lead to a Use-After-Free (UAF) vulnerability, where memory is accessed after it has been deallocated. Exploiting this race condition could cause a kernel panic, resulting in a Denial of Service (DoS) to the system.

This vulnerability is rated as Moderate severity rather than Important because exploitation requires hitting a narrow race condition between network device destruction and incoming Multicast Listener Discovery (MLD) query processing. In standard Red Hat Enterprise Linux deployments, removing or tearing down network interfaces is a privileged operation restricted to administrators. Successful exploitation primarily leads to a kernel panic resulting in denial of service, with code execution being highly impractical.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.