CVE-2026-43385
kernel: net: Fix rcu_tasks stall in threaded busypoll
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 8, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel where a race condition in the rcu_tasks grace period handling within the napi_threaded_poll_loop function can lead to a stall. This issue occurs when threaded busypoll is enabled and specific network operations are performed. A local user or a specific workload could exploit this to cause the system to become unresponsive or hang, resulting in a Denial of Service (DoS).
Statement
Red Hat rates this vulnerability as Low severity because triggering the condition requires local access and relies on non-default network performance tuning that is not enabled in standard configurations. Under typical deployments, standard interrupt and polling mechanisms are utilized rather than threaded busy polling, meaning standard installations remain unexposed during ordinary operations. Even when enabled by an administrator, the impact is confined to a local denial of service via system stalls or unresponsiveness without compromising data confidentiality or system integrity.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-821 · Incorrect Synchronization