CVE-2026-89521

A flaw was found in the Linux kernel's core scheduling component. This issue occurs when the picktask function releases the run queue rq lock, allowing an interleaving selection to invalidate the scheduler's internal state. This inconsistency can lead to incorrect task selection and skewed resour...

CVE-2026-89518

A flaw was found in the Linux kernel's schedext component. Under core scheduling, incorrect assumptions in dispatch kfuncs regarding thisrq can lead to a deadlock. This occurs when an rq lock is acquired on a CPU different from the dispatched rq's, potentially causing the system to become...

CVE-2026-89521

In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle picktask releasing the rq lock Core scheduling's picknexttask breaks when a -picktask implementation can release the rq lock. The selection state derived on entry is only valid while the lock is held...

CVE-2026-89521

CVE-2026-89521 affects the Linux kernel scheduler (sched/core ). The vulnerability is in core scheduling's pick_next_task() : when a ->pick_task() implementation can release the rq lock, the selection state derived on entry becomes invalid. This can cause the single-CPU fast path to commit an ...

EUVD-2026-76427

In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle picktask releasing the rq lock Core scheduling's picknexttask breaks when a -picktask implementation can release the rq lock. The selection state derived on entry is only valid while the lock is held...

CVE-2026-89521 sched/core: Handle pick_task() releasing the rq lock

In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle picktask releasing the rq lock Core scheduling's picknexttask breaks when a -picktask implementation can release the rq lock. The selection state derived on entry is only valid while the lock is held...

CVE-2026-89521 sched/core: Handle pick_task() releasing the rq lock

In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle picktask releasing the rq lock Core scheduling's picknexttask breaks when a -picktask implementation can release the rq lock. The selection state derived on entry is only valid while the lock is held...

CVE-2026-89518

This CVE affects the Linux kernel 's sched_ext (BPF scheduler extension) subsystem. Under core scheduling , ops.dispatch() may execute on a CPU different from the dispatched run queue's, but several kfunc paths incorrectly assumed this_rq() always coincides with the dispatched rq. Specifically, s...

EUVD-2026-76423

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix rq-corepick corruption under core scheduling Core scheduling's picknexttask picks what to run on every SMT sibling of the core in a single pass under the shared core-wide rq lock. The selection state is consistent...

PT-2026-90237

In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle pick task releasing the rq lock Core scheduling's pick next task breaks when a -pick task implementation can release the rq lock. The selection state derived on entry is only valid while the lock is held...

PT-2026-90236

In the Linux kernel, the following vulnerability has been resolved: sched/core: Make core-sched flips wait for in-flight selections Core scheduling's pick next task operates on all sibling rqs under one acquisition of the shared core-wide lock. A -pick task that releases the rq lock leaves every...

SUSE CVE-2025-21657

In the Linux kernel, the following vulnerability has been resolved: schedext: Replace rqlock to rawspinrqlock in scxopsbypass scxopsbypass iterates all CPUs to re-enqueue all the scx tasks. For each CPU, it acquires a lock using rqlock regardless of whether a CPU is offline or the CPU is currentl...

DEBIAN-CVE-2025-21657

In the Linux kernel, the following vulnerability has been resolved: schedext: Replace rqlock to rawspinrqlock in scxopsbypass scxopsbypass iterates all CPUs to re-enqueue all the scx tasks. For each CPU, it acquires a lock using rqlock regardless of whether a CPU is offline or the CPU is currentl...

CVE-2024-42245

In the Linux kernel, the following vulnerability has been resolved: Revert "sched/fair: Make sure to try to detach at least one movable task" This reverts commit b0defa7ae03ecf91b8bfd10ede430cff12fcbd06. b0defa7ae03ec changed the load balancing logic to ignore env.maxloop if all tasks examined to...