CVE-2026-72340

A flaw was found in the Linux kernel's Microchip VCAP driver. A race condition exists in the shared Super VCAP block, where independent locking of VCAP instances can lead to concurrent access issues. A local attacker with the ability to trigger concurrent operations, such as a full rule dump in debugfs while another instance is being written to, could exploit this. This can result in the corruption of hardware entries and incorrect data being committed.

This vulnerability is rated as Moderate severity rather than Important because exploitation requires local access, specialized Microchip switch hardware, and access to privileged debugfs interfaces, limiting the impact to hardware state corruption and denial of service. Red Hat Enterprise Linux is not affected by this flaw as the vulnerable driver code is not present in supported kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.