CVE-2026-93226

A flaw was found in the Linux kernel's IPv6 networking subsystem. A race condition occurs when reading route exception lists without proper synchronization against concurrent route updates. A local user can trigger this flaw by querying network routing tables during simultaneous route updates, potentially causing memory corruption or a system crash resulting in a denial of service (DoS).

This flaw is rated as having a Low impact because exploiting it requires an unprivileged local user to win a narrow race condition between routing table dump operations and dynamic route exception updates. In standard Red Hat Enterprise Linux environments, such exception updates occur infrequently, primarily during events like path MTU discovery. Furthermore, the issue only presents a denial of service risk via a kernel crash, without enabling privilege escalation or information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.