CVE-2026-98991

A flaw was found in the Linux kernel. A local attacker can cause a Denial of Service (DoS) by triggering a use-after-free flaw, which occurs when the system accesses memory after it has been released. During certain unmount operations, the kernel fails to verify whether a filesystem mount is already queued for notifications, allowing duplicate entries that leave references to freed memory. Subsequent mount operations traverse this invalid memory, leading to kernel memory corruption and a system crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.