CVE-2026-98544

A flaw was found in the Linux kernel's Brocade 10Gb Ethernet (bna) driver. During device removal or shutdown, internal timers can rearm each other and continue executing after associated driver data structures have been released. A local user with administrative privileges could exploit this race condition during device teardown, triggering a use-after-free flaw that causes a system crash and Denial of Service (DoS).

This vulnerability is rated as Moderate because exploitation requires local administrative privileges to trigger driver teardown on systems with specific Brocade 10Gb Ethernet hardware, limiting the impact to a denial of service. Unprivileged or remote attackers cannot trigger this race condition, and the flaw only manifests when unloading the driver or removing the device. Enterprise environments not utilizing Brocade network adapters are not exposed, and newer Red Hat Enterprise Linux releases do not include the vulnerable driver code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.