CVE-2026-64226

A flaw was found in the Linux kernel's sched_ext component. This Use-After-Free (UAF) vulnerability occurs in the scx_root_enable_workfn() function. Specifically, put_task_struct(p) is called before scx_error() dereferences p->comm and p->pid, leading to a premature freeing of the task. A local attacker could exploit this to potentially achieve arbitrary code execution or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.