PT-2026-51874 · Linux+2 · Linux Kernel+2

CVE-2026-52980

·

Published

2026-04-28

·

Updated

2026-09-07

CVSS v2.0

6.0

Medium

VectorAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A crash can occur when a newly forked sched entity enters the fair class with se->rel deadline unexpectedly set. This happens because the sched fork() function fails to clear rel deadline during initialization. Consequently, the place entity() function, called by enqueue entity(), treats se->deadline as a relative deadline and converts it into an abnormally large absolute deadline by adding the current vruntime.
If the task subsequently calls sched yield(), the yield task fair() function advances se->vruntime to this inflated deadline. This value can cause an overflow when multiplied by the entity weight during the enqueue path, corrupting cfs rq->sum w vruntime and breaking EEVDF (Earliest Eligible Virtual Deadline First) eligibility calculations. This may result in all entities appearing ineligible, causing pick next entity() to return NULL and leading to a NULL dereference crash.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

NULL Pointer Dereference

Improper Initialization

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-13933
CVE-2026-52980
OPENSUSE-SU-2026:21388-1
SUSE-SU-2026:22742-1
SUSE-SU-2026:22769-1
SUSE-SU-2026:22812-1
SUSE-SU-2026:22835-1
USN-8566-1
USN-8568-1
USN-8569-1
USN-8593-1
USN-8603-1
USN-8618-1
USN-8663-1
USN-8664-1
USN-8728-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu