Decoupling Scheduling Cache from Memory Management in Linux Kernel
CVE-2026-98385
Key Information:
Badges
What is CVE-2026-98385?
A vulnerability exists in the Linux kernel due to the tight coupling of scheduling statistics with memory management structures. This architectural design flaw can lead to a use-after-free condition during task context switching. When a task switches its memory management (mm), another CPU might attempt to access stale scheduling statistics that have already been freed, potentially leading to erroneous behavior or crashes. The vulnerability was addressed by decoupling the scheduling cache group from the mm structure, enabling better management and lifecycle control via a reference counting mechanism. This patch not only mitigates the associated risks but also enhances flexibility for future task grouping configurations.
Affected Version(s)
Linux df0d98475954d655571979aa061ecb07d7e00392 < 852ecb6bc0bc0106f44f74ba3944524732486025
Linux df0d98475954d655571979aa061ecb07d7e00392 < 28f9c0e0a0b94c5d3e1b634db545f6e1f94858c5
Linux 7.2
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.