CVE-2026-68090

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the debugobjects component when a concurrent out-of-memory (OOM) situation occurs. When the system runs out of memory, debug objects are disabled and shadow objects are freed. In the functions debug object assert init() and debug object activate(), a failure to find a shadow object can lead to the unconditional invocation of a fixup callback, even if debug objects have been disabled. This occurs because the check for the debug objects enabled variable is bypassed, resulting in a dysfunctional timer within the stub timer() function called by hrtimer fixup assert init().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.