CVE-2026-99071

A flaw was found in the Linux kernel's IPv4 networking subsystem. A local user with network administration privileges can trigger a race condition during concurrent routing table updates. This timing issue occurs when preparing route change notifications, generating an unexpected message size error that triggers an internal kernel warning. This flaw may result in a Denial of Service (DoS) if the system is configured to crash on kernel warnings.

This vulnerability is rated as having a Moderate impact because exploitation requires local access with elevated network administration privileges and precise timing during concurrent routing modifications. On default Red Hat Enterprise Linux installations, standard unprivileged users cannot manipulate routing tables, significantly restricting the potential attack surface. Furthermore, the issue manifests as an unexpected kernel warning rather than memory corruption, causing system termination only in non-standard environments specifically configured to panic on warnings.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.