CVE-2026-64177

A flaw was found in the Linux kernel's Phonet Pipe End Point (PEP) protocol. This vulnerability arises from an inconsistent lock state when the pep_do_rcv() function forwards a packet to a child socket. Specifically, the child socket's lock can be acquired with Bottom Halves (BH) enabled in one execution path and disabled in another, leading to an inconsistent locking state. A local attacker could exploit this to cause a self-deadlock, resulting in a Denial of Service (DoS) on the system.

This vulnerability is rated as having Moderate impact for Red Hat products because an exploit requires local execution to trigger a self-deadlock and denial of service, with no potential for privilege escalation or data exposure. The Phonet protocol is a legacy mobile network stack that is not enabled or utilized in typical enterprise configurations across supported Red Hat Enterprise Linux releases. Consequently, default installations do not expose systems to this flaw under standard operating conditions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.