CVE-2026-72405

A flaw was found in the Linux kernel's UDP tunnel networking component. A race condition in the udp_tunnel_nic_device_sync function allows a work item to be double-queued. This can lead to a use-after-free vulnerability, where memory is prematurely freed while still active. A local attacker could potentially exploit this to cause a denial of service or other undefined system behavior.

This vulnerability is rated as Moderate impact because successful exploitation requires local system access, high execution timing precision during concurrent network interface tasks, and administrative privileges to trigger device synchronization or deregistration. Under standard enterprise configurations, unprivileged users cannot initiate the interface teardown operations necessary to provoke the race condition. Consequently, the flaw primarily poses a local denial-of-service or integrity risk in environments where untrusted local users possess network management privileges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.