Race Condition in Linux Kernel's Networking Subsystem - Affected Product by Linux Foundation
CVE-2026-68138
Key Information:
Badges
What is CVE-2026-68138?
A vulnerability exists in the Linux kernel's networking subsystem that allows for a race condition involving qdisc_rtab_list. This occurs when multiple CPU cores attempt to access and modify the same singly linked list of rate tables concurrently. The lack of proper synchronization mechanisms can lead to use-after-free and double-free errors, posing a security risk to the system. The issue arises particularly in configurations where the RTNL mutex is not held, allowing concurrent access that can corrupt system-wide data structures.
Affected Version(s)
Linux 470502de5bdb1ed0def643a4458593a40b8f6b66
Linux 470502de5bdb1ed0def643a4458593a40b8f6b66
Linux 5.1
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.