CVE Database›Document archive›CVE-2026-46154

CVE-2026-46154

kernel: sched_ext: Read scx_root under scx_cgroup_ops_rwsem in cgroup setters

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 28, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel, specifically within the sched_ext component. This vulnerability, a use-after-free, occurs in the cgroup setters when the scx_root pointer is cached before a required lock is acquired. This can lead to a stale pointer if a scheduler is disabled and then re-enabled, allowing a local attacker to potentially cause a denial of service or achieve privilege escalation.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference