CVE-2026-89519

CVE-2026-89519 affects the Linux kernel's sched_ext (extensible scheduler) subsystem. The root cause is that SCX_RQ_BAL_KEEP , an rq-level flag used to tell the picker to keep running the previous task, becomes stale under core scheduling : because selections interleave through dispatch lock drop...

EUVD-2026-76425

In the Linux kernel, the following vulnerability has been resolved: schedext: Replace SCXRQBALKEEP with a dispatch verdict return SCXRQBALKEEP tells the pick to keep running the previous task, a leftover from when balancing and picking were separate operations. An rq-level flag only works while...

CVE-2026-89518 sched_ext: Fix this_rq() assumptions in dispatch kfuncs

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix thisrq assumptions in dispatch kfuncs Under core scheduling, dispatch runs from within the core-wide pick and can target a sibling rq, so ops.dispatch may execute on a CPU different from the dispatched rq's. Several...

CVE-2026-89519

In the Linux kernel, the following vulnerability has been resolved: schedext: Replace SCXRQBALKEEP with a dispatch verdict return SCXRQBALKEEP tells the pick to keep running the previous task, a leftover from when balancing and picking were separate operations. An rq-level flag only works while...

EUVD-2026-76423

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix rq-corepick corruption under core scheduling Core scheduling's picknexttask picks what to run on every SMT sibling of the core in a single pass under the shared core-wide rq lock. The selection state is consistent...

CVE-2026-89517 sched_ext: Fix rq->core_pick corruption under core scheduling

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix rq-corepick corruption under core scheduling Core scheduling's picknexttask picks what to run on every SMT sibling of the core in a single pass under the shared core-wide rq lock. The selection state is consistent...

CVE-2026-89517

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix rq-corepick corruption under core scheduling Core scheduling's picknexttask picks what to run on every SMT sibling of the core in a single pass under the shared core-wide rq lock. The selection state is consistent...

CVE-2026-89517 sched_ext: Fix rq->core_pick corruption under core scheduling

In the Linux kernel, the following vulnerability has been resolved: schedext: Fix rq-corepick corruption under core scheduling Core scheduling's picknexttask picks what to run on every SMT sibling of the core in a single pass under the shared core-wide rq lock. The selection state is consistent...

CVE-2026-89517

CVE-2026-89517 affects the Linux kernel's sched_ext (sched_ext) subsystem under core scheduling . Since commit 4c95380701f5, sched_ext's dispatch runs inside pick_next_task() and can drop the core-wide rq lock. When selections on the same core interleave through this dropped lock, they corrupt ea...

PT-2026-96372

In the Linux kernel, the following vulnerability has been resolved: fbdev: ssd1307fb: defer I2C transfers from damage callbacks The fbdev damage callbacks may run from fbcon while printk has disabled preemption. They currently update the display synchronously, which enters the sleeping I2C transf...

PT-2026-90314

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description In the fbdev component, specifically within the ssd1307fb driver, damage callbacks may execute from fbcon while printk has disabled preemption. These callbacks currently update the displ...

PT-2026-90237

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in core scheduling where the pick next task function fails when a pick task implementation releases the rq lock. The selection state established at the start is only vali...

PT-2026-90236

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the core scheduling mechanism where the pick next task function operates on sibling runqueues under a shared core-wide lock. If pick task releases the runqueue...

CVE-2026-89521: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: sched/core: Handle picktask releasing the rq lock Core scheduling's picknexttask breaks when a -picktask implementation can release the rq lock. The selection state derived on entry is only valid while the lock is held...

CVE-2026-89519: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: schedext: Replace SCXRQBALKEEP with a dispatch verdict return SCXRQBALKEEP tells the pick to keep running the previous task, a leftover from when balancing and picking were separate operations. An rq-level flag only works while...

PT-2026-90234

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sched ext component where certain kernel functions incorrectly assume that the current CPU is always the same as the dispatched runqueue rq. Under core scheduling,...

PT-2026-90235

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sched ext component where the use of the SCX RQ BAL KEEP flag can lead to incorrect task execution. This occurs because the flag is set at the run-queue rq level,...

PT-2026-90233

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the core scheduling of the Linux kernel where the pick next task function can experience state corruption. This occurs when selections on the same core interleave due ...

CVE-2026-89598: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fbdev: ssd1307fb: defer I2C transfers from damage callbacks The fbdev damage callbacks may run from fbcon while printk has disabled preemption. They currently update the display synchronously, which enters the sleeping I2C transf...

CVE-2026-19583

Velociraptor allows some sensitive artifacts to be gated by additional permissions. For example, the Linux.Sys.BashShell artifact allows arbitrary command execution on endpoints, and so it requires the EXECVE permission to schedule. However, no such check was implemented for client monitoring...