CVE-2026-98385 sched/cache: Decouple sched_cache_group from mm to fix UAF

In the Linux kernel, the following vulnerability has been resolved: sched/cache: Decouple schedcachegroup from mm to fix UAF Currently the sched cache grouping is by mm and the scheduling statistics schedcachestat lives in the mm structure. This ties the life cycle of scheduling stats with mm. In...

CVE-2026-98385

The Linux kernel contains a Use-After-Free (UAF) vulnerability in the sched/cache component. The issue stems from the scheduling statistics (sched_cache_stat) being embedded directly within the mm_struct, tying their lifecycle to the memory management structure. A race condition occurs when a tas...