CVE-2026-74593

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> sched_ext: Take cgroup_lock() first in scx_cgroup_lock()<br /> <br /> scx_cgroup_lock() write-locks scx_cgroup_ops_rwsem and then takes<br /> cgroup_lock(), which can deadlock through kernfs:<br /> <br /> scx enable/disable cgroup rmdir cpu.weight write<br /> ------------------ ------------ ----------------<br /> cgroup_lock()<br /> percpu_down_write(rwsem)<br /> cgroup_lock()<br /> kernfs_get_active()<br /> percpu_down_read(rwsem)<br /> kernfs_drain()<br /> <br /> The enable path waits for the rmdir to release cgroup_mutex. The rmdir,<br /> deactivating the cpu controller&amp;#39;s files, waits in kernfs_drain() for the<br /> write&amp;#39;s active reference. The write, in scx_group_set_weight(), waits for<br /> the rwsem behind the pending writer.<br /> <br /> Take cgroup_lock() first. The set_* paths take no cgroup locks inside the<br /> read side, so a pending write-lock then only waits for read sections that<br /> always run to completion, and no dependency from the rwsem back to<br /> cgroup_mutex remains.