CVE-2026-74731

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the sched ext component. A sub-scheduler enable process can fail before the scx link sched() function links the scheduler into the hierarchy. In such cases, the cleanup process still executes the full scx sub disable() function. This creates a race condition during root disable because the drain descendants() function is the only ordering mechanism between a sub-scheduler's disable-time task walk and the root disable's all-task teardown. Since an unlinked sub-scheduler is invisible to this process, the root teardown can occur between the unlinked sub-scheduler's drain and its walk, causing tasks to exit without a scheduler. Subsequently, the walk triggers a membership warning and re-homes exited tasks onto the dying hierarchy, leading to the use-after-free condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.