CVE Database›Document archive›CVE-2026-43385

CVE-2026-43385

kernel: net: Fix rcu_tasks stall in threaded busypoll

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 8, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel where a race condition in the rcu_tasks grace period handling within the napi_threaded_poll_loop function can lead to a stall. This issue occurs when threaded busypoll is enabled and specific network operations are performed. A local user or a specific workload could exploit this to cause the system to become unresponsive or hang, resulting in a Denial of Service (DoS).

Statement

Red Hat rates this vulnerability as Low severity because triggering the condition requires local access and relies on non-default network performance tuning that is not enabled in standard configurations. Under typical deployments, standard interrupt and polling mechanisms are utilized rather than threaded busy polling, meaning standard installations remain unexposed during ordinary operations. Even when enabled by an administrator, the impact is confined to a local denial of service via system stalls or unresponsiveness without compromising data confidentiality or system integrity.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-821 · Incorrect Synchronization