CVE-2026-89548

A flaw was found in the Linux kernel's SUNRPC component. When sunrpc_destroy_cache_detail() is called, it may not properly drain the cache_cleaner before freeing a cache_detail object. This oversight can lead to a use-after-free vulnerability, where the system attempts to access or use memory that has already been deallocated. A local attacker could potentially exploit this to cause a denial of service or achieve privilege escalation.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux and OpenShift Container Platform because exploitation requires local system access, specific capabilities to create and tear down network namespaces, and winning a narrow timing window during asynchronous cache cleanup. On typical installations, remote attackers cannot reach this flaw directly, which significantly restricts the attack surface. An attacker with appropriate local or containerized privileges could attempt to trigger memory corruption, potentially disrupting kernel operations or gaining elevated privileges.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.