CVE-2026-98071

A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) subsystem. A race condition occurs in the connection path reset logic when connection state flags are completely cleared while concurrent transmission or completion tasks attempt to update them. A local user could exploit this flaw by triggering a connection reset during active network traffic, leading to state corruption and a denial of service (DoS).

A moderate severity vulnerability was found in the Linux kernel Reliable Datagram Sockets (RDS) subsystem. When a connection is shut down and reset, rds_conn_path_reset() clears the entire connection path flag word (cp_flags) with a plain, non-atomic store, while concurrent transmit and transport completion paths update the same word using atomic bit operations. A local user with privileges to create RDS sockets could exploit this race condition by triggering a connection reset during active network traffic; updates to the connection state flags may then be silently discarded, corrupting connection state and causing a denial of service of the RDS subsystem. There is no impact on the confidentiality or integrity of data. The flaw is rated Moderate impact (CVSS 3.1 score 5.5, AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Evaluation of the currently supported Red Hat Enterprise Linux (including kernel-rt), Red Hat In-Vehicle OS, and OpenShift Container Platform RHEL CoreOS streams determined that the vulnerable code is not present in the shipped kernels, so those products are not affected. The remaining product entry, Red Hat Enterprise Linux 6 Extended Lifecycle Support, is out of support scope.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.