CVE-2026-31480

A flaw was found in the Linux kernel. A local attacker or a user with specific privileges could exploit a race condition during CPU hotplug operations, specifically when using the 'osnoise' tracing feature. This vulnerability can lead to a system deadlock, rendering the system unresponsive and requiring a reboot.

Red Hat acknowledges the osnoise/cpu-hotplug lock ordering bug fixed upstream by acquiring cpus_read_lock before interface_lock. This is a local deadlock class defect in tracing tooling, not a remote attack surface. Customers using osnoise should move to patched kernels; unloading trace infrastructure is not a practical sustained mitigation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.