CVE-2026-99156

A flaw was found in the SCSI tape driver in the Linux kernel. A local user can trigger a race condition between device removal and open operations, causing the kernel to access memory after it has been freed. This use-after-free vulnerability primarily results in a Denial of Service (DoS) by causing a system crash, and could potentially allow privilege escalation.

This vulnerability is rated as Moderate severity because exploitation requires local access, precise timing during device removal, and access permissions to tape device nodes. In standard Red Hat Enterprise Linux deployments, SCSI tape drives are infrequently used, and device nodes are restricted from unprivileged users by default. Consequently, the likelihood of a local attacker triggering this race condition under typical operational conditions is low.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.