CVE-2026-68090

A flaw was found in the debugobjects component of the Linux kernel. A race condition can occur when an out-of-memory (OOM) situation happens concurrently with certain debug object operations. This can lead to a dysfunctional timer and a kernel warning, potentially causing system instability or a denial of service (DoS).

This vulnerability is rated with a Low severity because kernel object debugging is disabled by default in standard Red Hat Enterprise Linux production kernels and typically enabled only in diagnostic kernel packages. Furthermore, triggering the flaw requires local execution privileges combined with an uncommonly timed out-of-memory condition during object tracking operations. Even under these constrained circumstances, the failure results in an inoperative timer and kernel warning, limiting the blast radius to a localized denial of service without compromising system confidentiality or data integrity.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.