CVE-2026-98624

A flaw was found in the Linux kernel's netfilter subsystem. A race condition exists between socket release event processing and configuration requests within the nfnetlink_queue component. A local user could exploit this vulnerability by executing concurrent socket operations, triggering a kernel crash that results in a denial of service (DoS).

This vulnerability is rated as Moderate severity because exploitation requires local access and leads to a kernel crash causing a denial of service, without impacting confidentiality or data integrity. The flaw is triggered by a race condition during concurrent socket unbinding and release events in the nfnetlink_queue component. In standard Red Hat Enterprise Linux environments, netfilter queueing is not active by default unless custom packet filtering or userspace packet inspection software is configured.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.