CVE-2026-99139

A flaw was found in the Linux kernel's Transmission Control Protocol (TCP) subsystem. A race condition occurs when querying TCP congestion control settings without proper locking, which can allow dynamically allocated memory to be released while still being read. A local attacker can exploit this use-after-free flaw through concurrent socket requests to potentially achieve privilege escalation or trigger a system crash, resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.