CVE-2026-99174

A flaw was found in the Linux kernel's ext4 file system. A local user could exploit a race condition during concurrent file path lookup and filesystem unmount operations. When resolving a symbolic link as the filesystem's last mount reference is released, the kernel may dereference a null pointer or access previously freed memory, leading to a kernel crash and resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.