CVE-2026-98815

A flaw was found in the Linux kernel's NVMe (Non-Volatile Memory Express) subsystem. When tearing down a device namespace in multipath mode, character devices may remain accessible after their underlying data structures have been released. A local user could exploit this timing issue to trigger a use-after-free condition, leading to a system crash and Denial of Service (DoS) or potential privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.