CVE-2026-72404

A flaw was found in the Linux kernel's TIPC UDP media bearer. This vulnerability, a Use-After-Free (UAF) condition, occurs because certain data structures are prematurely destroyed during teardown without proper synchronization with concurrent operations. A local attacker with network access could exploit this race condition, potentially leading to a system crash or memory corruption.

This vulnerability is classified as Moderate impact because triggering the race condition requires local privileges to manage network interfaces and initiate TIPC UDP bearer teardown, with the primary consequence being a local denial of service via kernel panic. The TIPC networking subsystem is not loaded by default on standard Red Hat Enterprise Linux installations. Systems remain unaffected unless the TIPC kernel module has been explicitly enabled and configured.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.