CVE-2026-93150

A flaw was found in the Linux kernel's cgroup/cpuset component. A race condition exists where concurrent modifications to the nr_deadline_tasks variable can lead to its corruption. This corruption can result in incorrect system operations, potentially impacting system stability or availability.

This vulnerability is evaluated as having Moderate impact on Red Hat Enterprise Linux because exploitation requires local access and elevated scheduling capabilities to trigger concurrent scheduler modifications, limiting the potential blast radius to a localized denial of service. By default, unprivileged users lack the necessary permissions to set deadline scheduling policies or reassign processes across cpusets. Consequently, triggering the race condition requires existing administrative or container management privileges, preventing remote or unprivileged exploitation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.