CVE-2026-98994

A flaw was found in the Linux kernel. A local user could exploit a race condition in the statmount facility to cause a use-after-free condition, resulting in a kernel crash and Denial of Service (DoS). When querying an unmounted filesystem mount via an open file descriptor, the kernel fails to properly lock the parent mount structure, allowing concurrent cleanup operations to free the structure while it is being accessed.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.