Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-64226

sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path In scx_root_enable_workfn(), put_task_struct(p) is called before scx_error() dereferences p->comm and p->pid. If the iterator's reference is the last drop, the task is freed synchronously and the deref becomes a UAF. Move put_task_struct() past scx_error().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f0e1a0643a59bf1f922fa209cec86a170b784f3f to < cf396941901858b0de426cdcd3974eea6a02c98caffected
  • f0e1a0643a59bf1f922fa209cec86a170b784f3f to < 45c7c4e3db8b700307313c035ea08be829a7f21baffected
  • f0e1a0643a59bf1f922fa209cec86a170b784f3f to < 57e19ba3f58a67eb924022a5a60b67fd08e5cbbdaffected
  • f0e1a0643a59bf1f922fa209cec86a170b784f3f to < 9a415cc53711f2238e0f0ca8a6bcc796c003b127affected

Linux Linux

Default version status: affected

  • 6.12affected
  • 0 to < 6.12unaffected
  • 6.12.92 to ≤ 6.12.*unaffected
  • 6.18.34 to ≤ 6.18.*unaffected
  • 7.0.11 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References