CVE-2026-72431

A flaw was found in the Linux kernel. A vulnerability exists in the /proc/allocinfo feature where the system may attempt to access memory after it has been freed, known as a use-after-free. This can happen when a kernel module is unloaded while the system is still processing information from /proc/allocinfo that references the module's memory. A local attacker could potentially exploit this flaw to cause a system crash, leading to a Denial of Service.

This vulnerability is rated as Moderate severity because exploitation requires local access and concurrent module removal to trigger memory corruption, limiting the potential blast radius to a local denial of service. The underlying allocation tagging mechanisms are not included in supported Red Hat Enterprise Linux releases, leaving default deployments unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.