CVE-2026-93241

A flaw was found in the Linux kernel. When the out-of-memory (OOM) killer terminates a multi-threaded process and asynchronous memory cleanup cannot complete, exiting threads continue to invoke memory reclamation and serialize behind an internal lock. A local user can exploit this vulnerability by triggering memory exhaustion with heavily multi-threaded workloads, causing severe system stalls and a denial of service (DoS).

This vulnerability has been rated as having Low impact by Red Hat because an attacker must already possess local system access and sustain anomalous, highly multi-threaded processes to trigger prolonged exit stalls rather than causing kernel panics or data corruption. Standard deployments under default configurations enforce resource constraints that hinder an unprivileged account from establishing the required thread density and memory pressure. Furthermore, most stable enterprise platform releases are unaffected because the underlying logic is present only in newer kernel baselines.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.