CVE Database›Document archive›CVE-2026-74686

CVE-2026-74686

kernel: rqspinlock: Reset tail when preserving queue on deadlock

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · August 22, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's rqspinlock component. During deadlock detection, the system may not correctly reset the tail of the waiter queue. This improper handling can cause the system to wait indefinitely for a subsequent waiter that never arrives, leading to an indefinite stall and a denial of service (DoS).

Statement

Red Hat rates this vulnerability as having a Low security impact because triggering the stall requires an intricate multi-threaded race condition and an ABBA deadlock within resilient queued spinlocks. Exploitation does not allow privilege escalation or compromise data integrity, and it only affects systems when no subsequent thread attempts to acquire the lock. Furthermore, the underlying locking mechanism is not present in most standard Red Hat Enterprise Linux releases, significantly limiting practical exposure across customer environments.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-821 · Incorrect Synchronization