CVE-2026-98694

A flaw was found in the Linux kernel's Thunderbolt driver. When a control channel request is canceled, a race condition can cause the request to be rescheduled after its memory has already been freed, resulting in a use-after-free vulnerability. A local attacker could exploit this flaw to cause a Denial of Service (DoS) via a system crash or potentially corrupt kernel memory.

This vulnerability is rated as having a Moderate impact for Red Hat Enterprise Linux because exploitation is confined to local authenticated users, requires high race timing complexity, and is limited to hardware configurations utilizing Thunderbolt or USB4 controllers. Systems without active Thunderbolt hardware or peripherals cannot trigger this condition. Successful exploitation primarily leads to a kernel crash and system denial of service, without granting direct remote code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.