Riskcovery

CVE-2026-64226

sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path

State
Published
Severity
7.8 High
Published
Jul 24, 2026
Updated
Aug 5, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path

In scx_root_enable_workfn(), put_task_struct(p) is called before scx_error() dereferences p->comm and p->pid. If the iterator's reference is the last drop, the task is freed synchronously and the deref becomes a UAF.

Move put_task_struct() past scx_error().

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • f0e1a0643a59bf1f922fa209cec86a170b784f3f to before cf396941901858b0de426cdcd3974eea6a02c98cAffected
  • f0e1a0643a59bf1f922fa209cec86a170b784f3f to before 45c7c4e3db8b700307313c035ea08be829a7f21bAffected
  • f0e1a0643a59bf1f922fa209cec86a170b784f3f to before 57e19ba3f58a67eb924022a5a60b67fd08e5cbbdAffected
  • f0e1a0643a59bf1f922fa209cec86a170b784f3f to before 9a415cc53711f2238e0f0ca8a6bcc796c003b127Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.92 through 6.12.*Not affected
  • 6.18.34 through 6.18.*Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.