CVE-2026-45919

A flaw was found in the Linux kernel's real-time (RT) scheduler. Under specific heavy load conditions, a vulnerability in the rto_next_cpu() function can cause a CPU to repeatedly interrupt itself. This leads to a CPU hardlockup, resulting in a Denial of Service (DoS) for the system. This issue can be triggered by a local user or specific system workloads.

Red Hat has evaluated this issue as having a Low security impact because triggering the lockup requires a highly specific and rare scheduling scenario involving multiple real-time and standard tasks distributed across multiple processor cores. On standard Red Hat Enterprise Linux installations, unprivileged accounts cannot schedule real-time tasks by default without CAP_SYS_NICE capabilities or dedicated PAM configuration. As a result, the ability for an unprivileged local attacker to trigger a system lockup is minimal, confining the threat to a denial of service under specialized real-time workloads.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.