CVE-2026-98982

A flaw was found in the Linux kernel. A local user could exploit a use-after-free vulnerability to cause a Denial of Service (DoS) or potentially escalate privileges on the system. By bind-mounting a pseudo file descriptor, such as a Berkeley Packet Filter (BPF) token, as the root of a mount point, the kernel bypasses normal memory reclamation delays when releasing directory entries. Consequently, concurrent path lookup operations can access freed memory, resulting in memory corruption and a system crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.