SB2026090580 - Infinite loop in Linux kernel tipc

Description

This security bulletin contains information about 1 vulnerability.

1) Infinite loop (CVE-ID: CVE-2026-80866)

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

CVSSv4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a busy-wait loop in tipc_exit_net() when waiting for pending UDP bearer cleanup work during network namespace exit. A local user can trigger network namespace exit while cleanup work is pending to cause a denial of service.

The issue can result in soft lockups when the exit is executed by a high-priority task or on kernels configured with CONFIG_PREEMPT_NONE.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/522d1d950b9e3b68190a6de7534827c8dccedb73
• https://git.kernel.org/stable/c/c1481c94e74c955e0448ddf46b8615a44d840c1e