CVE-2026-93182

A flaw was found in the Linux kernel. A local user can trigger a divide-by-zero error in the scheduler's fair scheduling class (sched/fair) due to an unsigned 32-bit integer (u32) overflow in the update_tg_cfs_runnable() function. This overflow corrupts internal scheduling data, leading to an invalid division operation and ultimately causing a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Moderate impact because exploitation is restricted to local authenticated users and affects system availability without compromising data integrity or confidentiality. In typical Red Hat Enterprise Linux deployments, an unprivileged user can generate high scheduling contention across control groups to trigger an unhandled kernel exception and force a reboot. The risk does not warrant a higher rating because remote attack vectors are absent and the issue cannot be leveraged for privilege escalation or arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.