CVE-2026-93208

A flaw was found in the Linux kernel's memory management system. A race condition can occur when the kernel attempts to free memory caches while a CPU is being taken offline. This can lead to memory not being properly released, causing resource exhaustion or memory leaks. A local user could potentially trigger this issue, which may result in a denial of service.

This vulnerability is rated as having a Low impact because it is restricted to environments running debugging kernels compiled with KASAN, which is disabled by default in standard Red Hat Enterprise Linux builds. Triggering the race condition requires taking a CPU offline during cache shrink operations, an administrative action that cannot be performed by unprivileged users without specific capabilities. Consequently, standard production systems remain unaffected, and any potential risk is confined to resource leaks or warning messages in specialized diagnostic environments.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.