CVE-2026-98060

A flaw was found in the Linux kernel. A local user with permissions to load Berkeley Packet Filter (BPF) programs can cause a Denial of Service (DoS) or potentially achieve privilege escalation. The BPF verifier fails to prevent resilient lock operations within red-black tree comparison callbacks, allowing a callback to improperly release the tree lock during an active traversal. Consequently, another processor can remove and free the node, causing the kernel to access freed memory.

This vulnerability is rated as Moderate impact because successful exploitation requires local access with administrative capabilities to load custom BPF programs, coupled with precise timing conditions to win the race during callback execution. In typical Red Hat deployments, non-privileged accounts cannot load these specialized eBPF structures, substantially limiting attack exposure. Furthermore, the affected resilient lock mechanism is absent from earlier platform releases, confining the risk to newer kernel environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.