CVE-2026-74686
kernel: rqspinlock: Reset tail when preserving queue on deadlock
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 22, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's rqspinlock component. During deadlock detection, the system may not correctly reset the tail of the waiter queue. This improper handling can cause the system to wait indefinitely for a subsequent waiter that never arrives, leading to an indefinite stall and a denial of service (DoS).
Statement
Red Hat rates this vulnerability as having a Low security impact because triggering the stall requires an intricate multi-threaded race condition and an ABBA deadlock within resilient queued spinlocks. Exploitation does not allow privilege escalation or compromise data integrity, and it only affects systems when no subsequent thread attempts to acquire the lock. Furthermore, the underlying locking mechanism is not present in most standard Red Hat Enterprise Linux releases, significantly limiting practical exposure across customer environments.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-821 · Incorrect Synchronization