CVE-2026-97410
kernel: netconsole: take target_cleanup_list_lock in drop_netconsole_target()
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 24, 2026
Updated · October 18, 2026
Description
A flaw was found in the Linux kernel. This race condition vulnerability allows a local user to cause a Denial of Service (DoS) by crashing the system. The issue occurs when removing a netconsole logging target concurrently while an unregistered network interface undergoes cleanup. Because the removal and cleanup routines use mismatched locks while operating on the same target list, the simultaneous operations can corrupt internal kernel memory structures.
Statement
A moderate severity flaw was found in the Linux kernel netconsole subsystem. A local user with privileges sufficient to manage netconsole targets can trigger a race condition by removing a dynamically configured configfs netconsole target at the same time the underlying network interface is being unregistered and its targets are undergoing asynchronous cleanup. The target removal path (drop_netconsole_target()) and the cleanup worker (netconsole_process_cleanups_core()) manipulate the same target list node while holding disjoint locks, so winning this race can corrupt kernel list structures and crash the system, resulting in a local denial of service with no impact on confidentiality or integrity. Red Hat rates this flaw moderate severity (CVSS 3.1 score 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), reflecting the local attack vector and availability-only impact. Only Red Hat kernel releases that contain the newer netconsole target cleanup-list handling are affected; kernel streams whose code predates the introduction of this cleanup mechanism are recorded as not affected because the vulnerable code path does not exist in them.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-413 · Improper Resource Locking