CVE-2026-63799

CVE-2026-63799: Linux kernel fix for an OOB clear_bit in per-CPU CID handling. If a task runs with mm_cid.cid == MM_CID_UNSET during fixup (lazy CID assignment), cid_in_transit() can convert it to MM_CID_UNSET | MM_CID_TRANSIT. Later mm_cid_schedout() can clear_bit() using MM_CID_UNSET as the bit...