CVE-2026-72181

A flaw was found in the Linux kernel's scheduler component, specifically when handling CPU masks on MIPS architecture with CONFIG_CPUMASK_OFFSTACK enabled. An incorrect size calculation during the copy_from_user() operation could lead to memory corruption. This vulnerability allows a local attacker to potentially overwrite kernel memory, which could result in a denial of service or privilege escalation.

This vulnerability is evaluated as a Moderate severity issue because exploitation requires local access and relies on hardware-specific scheduling configurations. Red Hat Enterprise Linux products are not affected because the MIPS architecture is not supported or built in Red Hat kernel packages.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.