CVE-2026-53162

A flaw was found in the Linux kernel's memory cgroup (memcg) subsystem. When a non-maskable interrupt (NMI) occurs during an update of the system's random number generation state, it can lead to corruption of that state. This issue can result in memory cgroup charge draining, potentially causing system instability or a denial of service.

This vulnerability is rated as having a Moderate impact because triggering it requires local access and precise timing during non-maskable interrupt processing, with the maximum consequence limited to a system crash or denial of service rather than privilege escalation or disclosure of sensitive information. The race condition occurs within core kernel memory management when an interrupt preempts random number state updates during per-CPU memory cgroup refill operations. Standard enterprise deployments are not susceptible to remote exploitation or confidentiality compromises from this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.