Race condition in Linux kernel - CVE-2026-90081
Published: September 19, 2026
Vulnerability identifier: #VU151402
CSH Severity: Low
CVSS v4: 2 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-90081
CWE-ID: CWE-362
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper synchronization in rds_cong_map_updated() when handling congestion map updates. A local user can race congestion map updates with waiter registration to cause a denial of service.
A sender waiting on a congested port can remain blocked until another congestion update arrives or a signal is delivered, and poll() waiters can miss map-update notifications.
Affected software
Linux kernel
How to mitigate CVE-2026-90081
Install security update from vendor's repository.
External References
- https://git.kernel.org/stable/c/0e169f6a2adeb17b5577ed7e8abd642465bb50ec
- https://git.kernel.org/stable/c/281f9fda2e06d6c211bb365a5379ed2e05cc2e21
- https://git.kernel.org/stable/c/2a809d7896dbf18e1ecfbdd930f71c9fc298b16d
- https://git.kernel.org/stable/c/42884bd8b8fd023d6a610a695bd5ddd1d5dece17
- https://git.kernel.org/stable/c/a526214b9f0548ca0e53a6e0d1727d8ea9befc23
- https://git.kernel.org/stable/c/bf2b8130723efcb5b86c3ddb6317c3a9b2a9cfc5
- https://git.kernel.org/stable/c/d4f484661961636eb90d287050959e613795f73a
- https://git.kernel.org/stable/c/fa4b98e891fda28cc0638d809c6125ec63d8319d