CVE-2026-68090
Description
A flaw was found in the debugobjects component of the Linux kernel. A race condition can occur when an out-of-memory (OOM) situation happens concurrently with certain debug object operations. This can lead to a dysfunctional timer and a kernel warning, potentially causing system instability or a denial of service (DoS).
Statement
This vulnerability is rated with a Low severity because kernel object debugging is disabled by default in standard Red Hat Enterprise Linux production kernels and typically enabled only in diagnostic kernel packages. Furthermore, triggering the flaw requires local execution privileges combined with an uncommonly timed out-of-memory condition during object tracking operations. Even under these constrained circumstances, the failure results in an inoperative timer and kernel warning, limiting the blast radius to a localized denial of service without compromising system confidentiality or data integrity.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 5.5 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | Low | N/A | N/A |
| Privileges Required | Low | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
