CVE-2026-63799 sched/mmcid: Fix OOB clear_bit when CID is MM_CID_UNSET in fixup path

In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Fix OOB clearbit when CID is MMCIDUNSET in fixup path In mmcidfixupcpustotasks, when rq-curr has the target mm and mmcid.active is set, the CID is checked with cidintransit before setting the transition bit. In per-C...

CVE-2026-63799

In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Fix OOB clearbit when CID is MMCIDUNSET in fixup path In mmcidfixupcpustotasks, when rq-curr has the target mm and mmcid.active is set, the CID is checked with cidintransit before setting the transition bit. In per-C...

PT-2026-61115

In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Fix OOB clear bit when CID is MM CID UNSET in fixup path In mm cid fixup cpus to tasks, when rq-curr has the target mm and mm cid.active is set, the CID is checked with cid in transit before setting the transition bi...

CVE-2026-43418 sched/mmcid: Prevent CID stalls due to concurrent forks

In the Linux kernel, the following vulnerability has been resolved: sched/mmcid: Prevent CID stalls due to concurrent forks A newly forked task is accounted as MMCID user before the task is visible in the process' thread list and the global task list. This creates the following problem: CPU1 CPU2...

CVE-2026-43418

CVE-2026-43418 describes a race in the Linux kernel sched/mmcid subsystem: when new tasks are created concurrently, a newly forked task is counted as an MMCID user before it is visible in thread and task lists, which can lead to an incorrect CID allocation and potentially a machine stall. The mit...