A race condition exists in Linux’s futex subsystem during a private hash resize, allowing a task that requests the resize to block indefinitely in an uninterruptible state. The bug occurs when the futex_pivot_pending() function observes an inconsistent view of the hash state, causing the task to sleep after the pivot has already completed. This leads to a hung-task condition that can trigger a kernel panic and halt the system. The weakness is a classic race condition (CWE‑362) that results in a denial of service by disabling system responsiveness.

The flaw resides in the Linux kernel, affecting all distributions that compile the kernel with the default futex implementation before the patch is applied. No specific version numbers are listed, so any kernel prior to the fix may be vulnerable. The vulnerability is triggered only when a process performs a custom private hash resize through the futex interface.

The damage model is a local denial of service that can crash or hang the host. An attacker would need to execute a privileged routine that initiates the resize; therefore the attack requires local code execution or a compromised privileged process. Because the CVSS and EPSS values are unavailable and the vulnerability is not listed in CISA’s KEV catalog, the exact probability of exploitation is uncertain. Nonetheless, the potential impact of a system-wide hang warrants rapid mitigation.