CVE-2026-74628

A flaw was found in the Linux kernel's x25 network protocol. The way timers are managed for x25 sockets can lead to a use-after-free vulnerability. Specifically, a timer might be rearmed after the associated socket has been deallocated, causing the system to access freed memory. This could potentially lead to a system crash or other unpredictable behavior.

This vulnerability is evaluated as having Moderate severity for Red Hat Enterprise Linux because exploitation requires local system access to create and close X.25 network sockets, limiting the primary impact to a denial of service via a kernel crash. The legacy X.25 protocol subsystem is not compiled into default Red Hat Enterprise Linux kernels, which prevents exposure under standard installations. The issue only presents a risk in custom or extended environments where the X.25 protocol is explicitly enabled.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.