Use After Free in Linux Kernel's Scheduler Handling

CVE-2026-64226

What is CVE-2026-64226?

A use after free vulnerability has been identified in the Linux kernel's scheduler within the scx_root_enable_workfn() function. This issue arises when the function prematurely calls put_task_struct(p) before verifying the integrity of p->comm and p->pid. As a consequence, if the referenced task's reference count drops to zero, it can lead to a situation where the task is freed synchronously, resulting in a use after free condition when dereferencing. This flaw necessitates careful management of task references to ensure stability and security in task handling.

References