CVE-2026-98069

A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) subsystem. A race condition between active data transmission and connection teardown can lead to a Denial of Service (DoS) via a kernel crash. A local user could exploit this flaw by generating network traffic while terminating a connection, causing concurrent access to resetting transport resources.

A moderate-impact vulnerability was found in the Linux kernel's Reliable Datagram Sockets (RDS) subsystem. During connection teardown, rds_conn_shutdown() only waited for the RDS_IN_XMIT and RDS_RECV_REFILL fastpath bits to be sampled clear rather than acquiring them, so the transmit or receive-refill path could re-acquire a bit immediately afterwards and run concurrently with the teardown on weakly ordered architectures, accessing transport rings and transmit state while they were being reset. A local user able to create RDS sockets could exploit this race by generating network traffic while terminating a connection, causing a kernel crash (for example a NULL pointer dereference or BUG_ON) and resulting in denial of service of the affected system. Red Hat assesses this flaw as moderate because exploitation requires local access, standard user privileges, and winning a narrow race window, which differs from the higher severity (8.1, network attack vector) assigned by the upstream CVE record. None of the Red Hat products currently listed in this flaw are affected, because the vulnerable code is not present in the shipped kernel builds; the only affected record is the out-of-support Red Hat Enterprise Linux 6 Extended Lifecycle Support stream.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.