CVE-2026-46154
kernel: sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters
Loading…
Severity
ModerateRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 28, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel, specifically within the sched_ext component. This vulnerability, a use-after-free, occurs in the cgroup setters when the scx_root pointer is cached before a required lock is acquired. This can lead to a stale pointer if a scheduler is disabled and then re-enabled, allowing a local attacker to potentially cause a denial of service or achieve privilege escalation.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference