PT-2026-64341 · Linux · Linux

CVE-2026-64226 · Published 2026-07-24 · Updated 2026-07-24

NVD

In the Linux kernel, the following vulnerability has been resolved:

sched ext: Avoid UAF in scx root enable workfn() init failure path

In scx root enable workfn(), put task struct(p) is called before scx error() dereferences p->comm and p->pid. If the iterator's reference is the last drop, the task is freed synchronously and the deref becomes a UAF.

Move put task struct() past scx error().

Related Identifiers

CVE-2026-64226

Affected Products

Linux

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-64226 · Security Note
• https://git.kernel.org/stable/c/45c7c4e3db8b700307313c035ea08be829a7f21b · Note
• https://git.kernel.org/stable/c/57e19ba3f58a67eb924022a5a60b67fd08e5cbbd · Note
• https://git.kernel.org/stable/c/cf396941901858b0de426cdcd3974eea6a02c98c · Note
• https://git.kernel.org/stable/c/9a415cc53711f2238e0f0ca8a6bcc796c003b127 · Note