CVE-2026-89519: sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return

Published Sep 11, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

schedext: Replace SCXRQBALKEEP with a dispatch verdict return

SCXRQBALKEEP tells the pick to keep running the previous task, a leftover from when balancing and picking were separate operations. An rq-level flag only works while dispatches and picks pair up one to one, which core scheduling breaks: selections interleave through dispatch's lock drops and a pick can consume a stale flag, keeping a task that has since been dequeued. Fixing core scheduling support requires the decision to travel with the dispatch that made it. Make scxdispatchsched() and balanceone() return an explicit verdict instead and drop the flag's plumbing from the tools autogen enum headers.

Also factor the pick-side invocation, its follow-up queueing and the post-dispatch checks out of dopicktaskscx() into dispatchpick(). No functional changes intended.

v2: Drop the SCXRQBALKEEP plumbing from the tools autogen enum headers as well (Andrea).

Event History

Sep 11, 2026
CVE Published
via MITRE·07:44 PM
Data Sourced
via MITRE·07:44 PM
Description

Frequently Asked Questions

1

Are functional scheduling changes expected after applying the fix?

No functional changes are intended. The change replaces an rq-level keep-running flag with an explicit dispatch verdict so the decision remains associated with the dispatch that made it.

2

What else must be updated when backporting this fix?

The SCX_RQ_BAL_KEEP plumbing must also be removed from the tools autogenerated enum headers. The referenced stable commits contain the corresponding changes.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203