CVE-2026-72482

A flaw was found in the gpib component of the Linux kernel. A double decrement of a descriptor counter within the command_ioctl() function can lead to a counter underflow. This re-enables a use-after-free vulnerability, where a concurrently active descriptor can be prematurely freed. This could result in system instability, a denial of service, or potentially allow for arbitrary code execution.

This vulnerability is rated as Moderate impact because successful exploitation requires local system access and is primarily limited to causing a denial of service via kernel instability. Supported Red Hat Enterprise Linux kernels do not enable or include the upstream GPIB driver code, leaving supported environments unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.