CVE-2026-74731

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> sched_ext: Skip sub-disable teardown for never-linked sub-schedulers<br /> <br /> A sub-scheduler enable can fail before scx_link_sched() links the sched into<br /> the hierarchy, e.g. when the parent is already being disabled, and cleanup<br /> still runs the full scx_sub_disable().<br /> <br /> That is racy against root disable: drain_descendants() is the only ordering<br /> between a sub&amp;#39;s disable-time task walk and root disable&amp;#39;s all-task teardown,<br /> and an unlinked sub is invisible to it. Root&amp;#39;s teardown can thus run between<br /> the never-linked sub&amp;#39;s drain and its walk, exiting every task to no<br /> scheduler.<br /> <br /> The walk then trips the membership WARN and re-homes the exited tasks onto<br /> the dying hierarchy, a use-after-free.<br /> <br /> Skip the cgroup ownership reset and the task walk if @sch was never linked,<br /> indicated by the empty -&gt;sibling as unlinking only happens later in the same<br /> function. The membership WARN remains valid: a linked sub is always waited<br /> on by an ancestor&amp;#39;s drain.