# CVE-2026-98070

Linux kernel RDS race leads to kernel memory corruption and crashes

- Page: https://www.vulneraibility.com/cve/CVE-2026-98070
- CVSS: 8.1
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.47% (percentile 40.9)
- Published: 2026-09-25

## Affected versions

- Linux: affected >= 335b48d980f631fbc5b233cbb3625ac0c86d67cb and < d625112564c3e980e02504270222b49b82690cee; >= 335b48d980f631fbc5b233cbb3625ac0c86d67cb and < 8e4c3b7844c906c7097b4cfedd9dd1f48c9a6a92; >= 335b48d980f631fbc5b233cbb3625ac0c86d67cb and < 062d9e008c67289e8e1b221ecdd8f9d60566d012; >= 335b48d980f631fbc5b233cbb3625ac0c86d67cb and < 02c5f9dc2efd823e061954d564ce00bacd1bebeb; 4.7; fixed in < 4.7, >= 6.12.111 and <= 6.12.*, >= 6.18.53 and <= 6.18.*, >= 7.2.7 and <= 7.2.*, >= 7.3-rc2 and <= *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Race condition allows concurrent transmit/reset leading to kernel memory corruption, crashes (DoS) and possible privilege escalation.

## Action

Patch when possible

## Recommendation

Apply vendor/stable kernel updates containing the RDS fix and reboot affected hosts

## References

- [other] https://git.kernel.org/stable/c/670af4e4a4de5e6bb5daee3838485571a0caa5fa
- [other] https://git.kernel.org/stable/c/830a2e21b200c6b6fdccc63dd3f23932bf7a894b
- [other] https://git.kernel.org/stable/c/a05790cb4ff03f797d76906990b148d83f63e7a3
- [other] https://git.kernel.org/stable/c/d184e6dd4b8f3c20c018595fd09795a66b46c8ef
- [other] https://git.kernel.org/stable/c/d625112564c3e980e02504270222b49b82690cee
- [other] https://git.kernel.org/stable/c/8e4c3b7844c906c7097b4cfedd9dd1f48c9a6a92
- [other] https://git.kernel.org/stable/c/062d9e008c67289e8e1b221ecdd8f9d60566d012
- [other] https://git.kernel.org/stable/c/02c5f9dc2efd823e061954d564ce00bacd1bebeb

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.