Lucene search
+L

37 matches found

OSV
OSV
added 2026/07/27 12:0 a.m.7 views

UBUNTU-CVE-2026-64226

In the Linux kernel, the following vulnerability has been resolved: schedext: Avoid UAF in scxrootenableworkfn init failure path In scxrootenableworkfn, puttaskstructp is called before scxerror dereferences p-comm and p-pid. If the iterator's reference is the last drop, the task is freed...

7.8CVSS5.7AI score0.00129EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/07/24 3:23 p.m.10 views

CVE-2026-64226

In the Linux kernel, the following vulnerability has been resolved: schedext: Avoid UAF in scxrootenableworkfn init failure path In scxrootenableworkfn, puttaskstructp is called before scxerror dereferences p-comm and p-pid. If the iterator's reference is the last drop, the task is freed...

5.7AI score0.00129EPSS
SaveExploits0References5Affected Software1
CVE
CVE
added 2026/07/24 3:23 p.m.21 views

CVE-2026-64226

In the Linux kernel, CVE-2026-64226 is addressed in sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path. The vulnerable sequence dereferenced p->comm and p->pid after put_task_struct(p) in scx_root_enable_workfn(); when the iterator’s reference was last dropped, the task coul...

7.8CVSS5.7AI score0.00129EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/07/01 7:51 p.m.9 views

CVE-2026-53328

A flaw was found in the Linux kernel's schedext component. When systemd's user manager interacts with subtreecontrol while schedext is loaded, a warning can be triggered. This occurs due to a mismatch in how cgroup and css identities are handled during task migration, potentially leading to syste...

5.5CVSS5.7AI score0.00122EPSS
SaveExploits0References4
CVE
CVE
added 2026/05/28 9:36 a.m.29 views

CVE-2026-46154

CVE-2026-46154 affects the Linux kernel sched_ext functionality. Root cause: in cgroup setters, scx_group_set_{weight,idle,bandwidth}() cache the scx_root before acquiring scx_cgroup_ops_rwsem, enabling a window where the pointer can become stale if a scheduler is disabled and freed (via RCU) and...

7CVSS5.8AI score0.0012EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2026/05/28 12:0 a.m.19 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the cgroup setter in schedext reading scxroot before acquiring a lock. This could lead to reusing...

7CVSS5.8AI score0.0012EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/14 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-43482

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Disable preemption between scxclaimexit and kicking helper work scxclaimexit atomically sets exitkind, which prevents scxerror from triggering further...

5.5CVSS5.5AI score0.00121EPSS
SaveExploits0References2
CVE
CVE
added 2026/05/08 2:21 p.m.26 views

CVE-2026-43392

Summary (CVE-2026-43392) : In the Linux kernel, the sched_ext vulnerability causes a potential DoS by starving the enable path in scx_enable() when fair-class workloads saturate the system. The root cause is a switch of the calling thread’s sched_class from fair to ext during the READY→ENABLED lo...

5.5CVSS5.7AI score0.0013EPSS
SaveExploits0References4Affected Software1
Debian CVE
Debian CVE
added 2026/05/08 2:21 p.m.11 views

CVE-2026-43392

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix starvation of scxenable under fair-class saturation During scxenable, the READY - ENABLED task switching loop changes the calling thread's schedclass from fair to ext. Since fair has higher priority than ext,...

5.5CVSS5.7AI score0.0013EPSS
SaveExploits0
NVD
NVD
added 2026/05/08 2:16 p.m.14 views

CVE-2026-43326

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix SCXKICKWAIT deadlock by deferring wait to balance callback SCXKICKWAIT busy-waits in kickcpusirqworkfn using smpcondloadacquire until the target CPU's kicksync advances. Because the irqwork runs in hardirq context,...

5.5CVSS0.00083EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/05/08 12:0 a.m.14 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a redundant cssput call in the schedext module’s scxcgroupinit function. This vulnerability may...

7.8CVSS5.8AI score0.00125EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/05/05 12:0 a.m.13 views

Linux Distros Unpatched Vulnerability : CVE-2026-31734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: schedext: Fix isbpfmigrationdisabled false negative on non-PREEMPTRCU Since commit...

5.5CVSS5.4AI score0.00121EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/05/01 9:27 p.m.8 views

CVE-2026-31734

A flaw was found in the Linux kernel's schedext component. An incorrect check for migration-disabled tasks on systems without CONFIGPREEMPTRCU enabled could lead to a task being dispatched to a remote CPU. This can trigger an scxerror in taskcanrunonremoterq, resulting in a Denial of Service...

5.5CVSS5.8AI score0.00121EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2026/05/01 9:24 p.m.9 views

CVE-2026-31733

A flaw was found in the Linux kernel's schedext component. The scheduler's direct dispatch state ddspdsqid was not consistently cleared across all execution paths. This oversight could leave the system in an incorrect state, leading to spurious warnings and unexpected behavior during task dispatc...

5.5CVSS5.9AI score0.0013EPSS
SaveExploits0References4
Fedora
Fedora
added 2026/02/11 1:0 a.m.9 views

[SECURITY] Fedora 42 Update: rust-scx_rusty-0.5.4-7.fc42

A multi-domain, BPF / user space hybrid scheduler used within schedext, which is a Linux kernel feature which enables implementing kernel thread schedulers in BPF and dynamically loading them. https://github.com/sched-ext/scx/tree/main...

7.5CVSS5.5AI score0.00443EPSS
SaveExploits1
NVD
NVD
added 2025/12/04 4:16 p.m.6 views

CVE-2025-40260

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix scxenable crash on helper kthread creation failure A crash was observed when the schedext selftests runner was terminated with Ctrl+\ while test 15 was running: NIP c00000000028fa58 scxenable.constprop.0+0x358/0x12b...

0.0017EPSS
SaveExploits0References2
OSV
OSV
added 2025/12/04 4:16 p.m.7 views

UBUNTU-CVE-2025-40260

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix scxenable crash on helper kthread creation failure A crash was observed when the schedext selftests runner was terminated with Ctrl+\ while test 15 was running: NIP c00000000028fa58 scxenable.constprop.0+0x358/0x12b...

5.7AI score0.0017EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2025/12/04 4:8 p.m.25 views

CVE-2025-40260 sched_ext: Fix scx_enable() crash on helper kthread creation failure

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix scxenable crash on helper kthread creation failure A crash was observed when the schedext selftests runner was terminated with Ctrl+\ while test 15 was running: NIP c00000000028fa58 scxenable.constprop.0+0x358/0x12b...

0.0017EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/12/04 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-40260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - schedext: Fix scxenable crash on helper kthread creation failure A crash was observed when the schedext selftests runner was terminated with Ctrl+\ while test 1...

5.7AI score0.0017EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.7 views

EUVD-2024-53794

Malicious code in bioql PyPI...

6.4AI score0.00175EPSS
SaveExploits0References2
Rows per page
Query Builder