CVE-2026-98463

A flaw was found in the Linux kernel's sched_ext (extensible scheduler) subsystem. Improper handling of wakeup enqueue flags during remote task activation can cause a deferred action request to remain pending after the scheduler is disabled. When a new scheduler initializes and processes deferred actions, it dereferences pointers pointing into freed memory. A local attacker could exploit this use-after-free condition to cause a Denial of Service (DoS) via a kernel crash or potentially corrupt memory.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.