CVE-2026-98567

A flaw was found in the Linux kernel. A local privileged user could trigger a Denial of Service (DoS) or kernel memory corruption by causing an out-of-bounds memory write. This issue occurs in the Transmit Packet Steering (XPS) networking mechanism when traffic classes are decreased without clearing leftover entries, allowing out-of-range traffic class indexes to be accessed during queue configuration.

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and the capability to reconfigure network interface traffic classes and XPS queue mappings. Under default configurations, network queue attributes in sysfs cannot be modified by unprivileged users, restricting exposure to administrative accounts or privileged container environments. While memory corruption can cause a kernel crash and system denial of service, triggering the defect depends on an atypical sequence of decreasing traffic classes followed by reassigning transmit queues.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.