CVE-2026-98968

A flaw was found in the Linux kernel's Automatic Multicast Tunneling (AMT) driver. Network query packets queued for transmission can outlive and reference an AMT tunnel structure after it has expired and been freed. When the delayed packet is subsequently transmitted, the kernel accesses the deallocated memory, resulting in a use-after-free condition. An attacker capable of manipulating network traffic timing could exploit this flaw to cause a Denial of Service (DoS) through a system crash or potentially execute arbitrary code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.