CVE-2026-97410

Received Received - Intake

Race Condition in Linux Kernel Netconsole Module

Publication date: 2026-09-24

Last updated on: 2026-09-25

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: netconsole: take target_cleanup_list_lock in drop_netconsole_target() drop_netconsole_target() unlinks the target while only holding target_list_lock. However, when the underlying interface has been unregistered, netconsole_netdev_event() moves the target from target_list to target_cleanup_list, and netconsole_process_cleanups_core() walks that list under target_cleanup_list_lock only. If a user removes the configfs target at the same time the cleanup worker is iterating target_cleanup_list, list_del() can corrupt the list because the two paths take disjoint locks while operating on the same list node. Acquire target_cleanup_list_lock around the list_del() so the unlink is serialised against netconsole_process_cleanups_core() regardless of which list the target currently belongs to. The state transition that downgrades STATE_DEACTIVATED to STATE_DISABLED is left intact and is performed under the same combined locking, preserving the existing ordering with resume_target().

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-24

Last Modified

2026-09-25

Generated

2026-10-15

AI Q&A

2026-09-24

EPSS Evaluated

2026-10-13

NVD

CVE-2026-97410

EUVD

EUVD-2026-86023

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's netconsole module. It involves a race condition where drop_netconsole_target() unlinks a target from a list while only holding target_list_lock. Meanwhile, netconsole_netdev_event() moves the target to another list under a different lock. If these operations occur simultaneously, list corruption can happen because they use disjoint locks on the same list node.

Detection Guidance

This vulnerability affects the Linux kernel's netconsole functionality and may not have direct detection commands. Monitor kernel logs for netconsole-related errors or crashes, especially during interface unregistration events. Check for kernel oops or warnings in dmesg or journalctl logs.

Impact Analysis

This vulnerability could lead to system instability or crashes if exploited. It may cause kernel panics or unexpected behavior in systems using netconsole for logging network traffic. Attackers might trigger this condition to disrupt logging or cause denial-of-service.

Compliance Impact

This vulnerability is a Linux kernel issue related to improper locking in the netconsole subsystem. It does not directly impact compliance with standards like GDPR or HIPAA, as those focus on data protection and privacy rather than kernel-level memory corruption or race conditions.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for CVE-2026-97410. Avoid using netconsole in environments where interface unregistration could occur concurrently with target removal. Monitor kernel updates and apply patches promptly.

Hi! I’m here to help you understand CVE-2026-97410. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70