CVE-2026-97971

A flaw was found in the Linux kernel's namespace listing subsystem. When an unauthorized caller attempts to list namespaces, the kernel acquires a reference to a candidate namespace before verifying listing permissions. If access is denied, releasing this reference can cause the kernel to sleep while holding a Read-Copy Update (RCU) lock, resulting in a system crash and Denial of Service (DoS). A local user can exploit this flaw by issuing a namespace listing request on restricted namespaces.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.