CVE-2026-98524

A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) subsystem. When memory region mapping fails during InfiniBand operations, the kernel can retain a stale reference to memory buffers that have already been released. A local attacker could exploit this flaw to trigger a use-after-free condition, potentially leading to local privilege escalation or a denial of service through a system crash.

This vulnerability is rated as an Important severity issue because an authenticated local user could leverage kernel memory corruption to escalate privileges to root or trigger an unrecoverable kernel panic. Under standard Red Hat Enterprise Linux configurations, the RDS networking subsystem and associated InfiniBand drivers are not loaded by default. Supported Red Hat Enterprise Linux releases do not include the vulnerable code, meaning standard deployments remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.