CVE-2026-98503

A flaw was found in the Linux kernel's packet socket implementation. A local user can cause a Denial of Service (DoS) or system instability by triggering premature reuse of transmit ring buffer slots while packet data is still in flight. Because these shared memory slots may be released and reused before transmission is finished, the kernel can experience memory corruption leading to an unexpected crash.

This vulnerability is rated as Moderate because exploitation is restricted to local attackers and primarily leads to a denial of service through a system crash. In standard Red Hat Enterprise Linux configurations, interacting with raw packet transmission rings requires the CAP_NET_RAW capability or unprivileged user namespaces. As a result, the blast radius is limited to disrupting kernel availability without granting arbitrary code execution or unauthorized data access.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.