CVE-2026-80866

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A busy-wait loop exists in the tipc exit net() function used to wait for pending UDP bearer cleanup works to complete. This loop relies on cond resched(), which may act as a NOP (no operation) if the network namespace exit is executed by a high priority task or on kernels configured without preemption (CONFIG PREEMPT NONE). In these scenarios, the system wastes CPU cycles, which can lead to soft lockups. The issue involves the wq count variable within the tipc net structure.

Recommendations Update the Linux kernel to a version where the tipc exit net() function is updated to use wait var event() instead of a busy loop, and the cleanup bearer() function is updated to use atomic dec and test() and wake up var().