CVE-2026-74331

A flaw was found in the Linux kernel's firmware loader. During system suspend or hibernation, a recursive locking deadlock can occur in the power management notification handler. This happens when memory allocation for asynchronous firmware caching fails, causing a synchronous execution path to attempt to acquire a lock that is already held. This vulnerability can lead to a system hang or unresponsiveness, resulting in a Denial of Service (DoS).

This vulnerability is rated as having a Low severity impact for Red Hat products because triggering it requires initiating a power transition while the system is simultaneously experiencing severe memory exhaustion. Typical Red Hat Enterprise Linux server environments do not use suspend or hibernation, and executing these transitions requires administrative privileges. Consequently, an unprivileged user cannot reliably trigger this issue to cause a denial of service during standard operations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.