CVE-2026-99173

A flaw was found in the Linux kernel's eventfs subsystem. An improper synchronization issue allows an internal directory structure (eventfs_inode) to be freed while still being accessed during file path validation, leading to a use-after-free condition. A local user could exploit this vulnerability during concurrent file operations to trigger a kernel crash, resulting in a denial of service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.