Scheduler Vulnerability in Linux Kernel for RK3588 by Vendor

CVE-2026-99183

What is CVE-2026-99183?

A vulnerability has been identified in the Linux kernel's handling of core unbinding within the RK3588 architecture. When a core that is not the last in a sequence is unbound, subsequent access attempts to this core can result in null pointer dereferences. This situation arises when the scheduler fails to account for cores that remain bound and operational, leading to potential system crashes or job timeouts. Affected functions such as rocket_job_run() and rocket_job_timedout() do not adequately validate the core's status before proceeding with operations, which can disrupt task scheduling and resource management. The fix involves modifying the core-search mechanism to ensure all allocated slots are considered during core bindings, thereby preventing access to unallocated or invalid memory locations.

References