CVE-2026-99212

A flaw was found in the Linux kernel's Reliable Datagram Sockets (RDS) subsystem. A local attacker could exploit this flaw to cause a Denial of Service (DoS) or memory corruption via a use-after-free condition. When route resolution fails during Remote Direct Memory Access (RDMA) connection establishment, the underlying connection identifier is prematurely released while the RDS subsystem retains a reference to it. When the connection is subsequently shut down, the kernel attempts to access and destroy the freed identifier, resulting in a system crash.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.