CVE-2026-80776

A flaw was found in the Linux kernel's futex subsystem. A local attacker could exploit a race condition in the futex_pivot_pending() function during a private hash resize operation. This vulnerability allows a malicious task to become indefinitely blocked, leading to a kernel panic and a Denial of Service (DoS) for the system.

This vulnerability is rated as Moderate because exploitation is restricted to local denial of service without compromising system confidentiality or integrity. Triggering the race condition requires local execution to invoke a specialized private futex hash resize operation, an uncommon scenario in standard enterprise workloads. While an indefinitely hung task can cause disruption or trigger a panic if hung-task panic sysctls are active, the issue cannot be exploited remotely or leveraged for privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.