CVE-2026-63799

A flaw was found in the Linux kernel's scheduler component. A local attacker could exploit an out-of-bounds write vulnerability during the creation or execution of a new task in per-CPU mode, specifically when an internal identifier is unassigned. This can lead to a bounded memory corruption, where a single bit of unpredictable kernel memory is overwritten. The consequence of this memory corruption could be system instability or a denial of service.