PT-2026-43786 · Linux+1 · Linux Kernel+1
CVE-2026-45919
·
Published
2026-05-27
·
Updated
2026-07-31
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the Real-Time (RT) load balancing mechanism where a CPU can enter an infinite self-Inter-Processor Interrupt (IPI) loop, leading to a CPU hardlockup. This occurs when a CPU becomes overloaded while hosting a CPU-bound RT task, a non-CPU-bound RT task, and a CFS task stuck in kernel space. When other CPUs trigger RT load balancing with
HAVE RT PUSH IPI enabled, they send IPIs to the overloaded CPU to execute the rto push irq work func function.During the execution of
push rt task, if the condition next task->prio < rq->donor->prio is met, the resched curr() function sets NEED RESCHED. Subsequently, the overloaded CPU calls rto next cpu(). Due to a mismatch between rd->rto loop and rd->rto loop next caused by multiple CPUs invoking tell cpu to push(), the rto next cpu() function may reselect the currently executing CPU. This causes the CPU to repeatedly queue irq work to itself, resulting in continuous self-interrupts.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Infinite Loop
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel