CVE-2026-80920

A flaw was found in the Linux kernel's io_uring subsystem. This vulnerability occurs when the system attempts to signal an event while holding a lock, which can lead to a recursive signaling loop. This improper handling of event notifications can cause the system to become unresponsive, resulting in a denial of service (DoS).

This vulnerability is rated as Moderate severity because it requires local access with the ability to initiate io_uring operations, and the resulting impact is limited to a denial of service without compromising data confidentiality or system integrity. In Red Hat Enterprise Linux environments, an authenticated local user could trigger recursive eventfd signaling loops during waitqueue wakeups, causing kernel deadlocks or system unresponsiveness. Older releases such as Red Hat Enterprise Linux 7 and 8 do not contain the vulnerable task-work wakeup implementation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.