Linux Kernel Vulnerability Affects Sub-Scheduler Management

CVE-2026-74731

What is CVE-2026-74731?

A vulnerability was identified within the Linux kernel related to sub-scheduler management. Specifically, the issue occurs when a sub-scheduler is not properly linked before the parent scheduler starts the disable process. This race condition allows for a situation where the parent scheduler's cleanup tasks could interfere with the management of tasks in a never-linked sub-scheduler, potentially leading to unintended behavior such as task re-homing onto an invalid hierarchy and a use-after-free scenario. The vulnerability emphasizes the need for careful task management and scheduling hierarchy maintenance, and patches have been implemented to rectify the issue by skipping certain clean-up procedures when a sub-scheduler was never linked.

References