CVE-2026-99201

A flaw was found in the Linux kernel's netlink subsystem. An unprivileged local user can exploit this vulnerability by manipulating netlink sockets with chosen port identifiers and observing exposed table bucket order. This flaw results in an information disclosure, allowing an attacker to infer sensitive internal kernel memory addresses and potentially bypass Kernel Address Space Layout Randomization (KASLR).

This vulnerability is rated as Low severity because it is restricted to local access and solely facilitates KASLR bypass rather than granting direct privilege escalation or causing a denial of service. By analyzing hash bucket ordering across netlink socket interfaces, an authenticated local attacker can determine internal pointer addresses. To achieve elevated privileges, this information disclosure must be combined with a separate exploitable security flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.