CVE-2026-98343

A flaw was found in the Linux kernel. A local user can exploit a use-after-free vulnerability in the Direct Memory Access (DMA) engine to cause a Denial of Service (DoS) via a system crash. The issue occurs when the channel cleanup routine attempts to access device information after the underlying device memory has already been freed. This flaw is triggered during channel release operations, resulting in memory corruption and kernel instability.

This vulnerability is rated as Moderate severity rather than Important because successful exploitation requires local access and typically depends on privileged or rare hardware driver lifecycle operations to trigger the race condition. Under typical Red Hat Enterprise Linux deployments, DMA subsystems interact primarily with specialized kernel drivers and hardware controllers, limiting direct manipulation by unprivileged users. While memory corruption could theoretically allow code execution, the most likely practical outcome in standard production environments is a kernel crash causing a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.