Infinite loop in Linux kernel - CVE-2026-99249
Published: November 3, 2026
Vulnerability identifier: #VU158992
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-99249
CWE-ID: CWE-835
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service by preventing system suspend and causing excessive CPU consumption.
The vulnerability exists due to non-freezable, potentially unbounded wait loops in zap_pid_ns_processes() when a PID namespace's init process exits while a tracer outside the namespace retains unreaped traced zombies. A local user can leave traced zombies unreaped to keep namespace teardown waiting indefinitely, prevent system suspend, and cause the final wait loop to spin after a freeze attempt.
Affected software
Linux kernel
How to mitigate CVE-2026-99249
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/064a6761d6f6ac55d090d3eaca649577ee736713
- https://git.kernel.org/stable/c/2e10b8a74f55b5aae33db105d3e2d3ae759c865a
- https://git.kernel.org/stable/c/4b47107f1a80c809c80093e872bcaccdbae13db4
- https://git.kernel.org/stable/c/7deb5770840339fe88755bf27b92f74edc26ee87
- https://git.kernel.org/stable/c/81933038f5e273d17ed22792f906889393b204c5
- https://git.kernel.org/stable/c/e8dafad7de9ede813af2d48cc04b7c88fef16682