CVE-2026-72338

A flaw was found in the Linux kernel's net/sched: act_pedit component. A Time-of-check to time-of-use (TOCTOU) race condition exists when sizing and filling a flow_rule buffer. This vulnerability allows a local attacker with CAP_NET_ADMIN capabilities to perform a heap out-of-bounds write with controlled content into an adjacent memory object, potentially leading to system instability or further compromise.

This flaw is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local administrative networking privileges (CAP_NET_ADMIN) to manipulate traffic control rules. On typical deployments, hardware-offloaded flower classifiers utilizing packet editing actions are not configured by default. While a successful exploit corrupts kernel slab memory and can trigger a system crash, the necessity for elevated capabilities and specialized network configurations limits the blast radius.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.