CVE-2026-90305

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ARM architecture implementation where enabling PREEMPT RT (Real-Time preemptibility) without selecting HAVE POSIX CPU TIMERS TASK WORK causes CPU timers to expire in a hard IRQ (Interrupt Request) context. In this state, the run posix cpu timers() function attempts to acquire the sighand->siglock spinlock, which is a sleeping function. Calling a sleeping function from an invalid context, such as a hard IRQ, leads to a system bug. This behavior can be triggered using setrlimit(RLIMIT CPU, ...) with a busy loop, or through setitimer(ITIMER PROF or ITIMER VIRTUAL) and POSIX CPU timers created via timer create().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.