CVE-2026-64226: sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path
In the Linux kernel, the following vulnerability has been resolved:
schedext: Avoid UAF in scxrootenableworkfn() init failure path
In scxrootenableworkfn(), puttaskstruct(p) is called before scxerror() dereferences p->comm and p->pid. If the iterator's reference is the last drop, the task is freed synchronously and the deref becomes a UAF.
Move puttaskstruct() past scxerror().
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64226?
The severity of CVE-2026-64226 is rated as high with a score of 7.8.
How do I fix CVE-2026-64226?
To fix CVE-2026-64226, apply the available patch provided by the Linux kernel.
What type of vulnerability is CVE-2026-64226?
CVE-2026-64226 is classified as a Use After Free vulnerability.
Which software is affected by CVE-2026-64226?
CVE-2026-64226 affects the Linux kernel.
What is the impact of CVE-2026-64226?
The impact of CVE-2026-64226 includes potential denial of service and compromised confidentiality, integrity, and availability.