sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return
In the Linux kernel, the following vulnerability has been resolved: sched_ext: Replace SCX_RQ_BAL_KEEP with a dispatch verdict return SCX_RQ_BAL_KEEP tells the pick to keep running the previous task, a leftover from when balancing and picking were separate operations. An rq-level flag only works while dispatches and picks pair up one to one, which core scheduling breaks: selections interleave through dispatch's lock drops and a pick can consume a stale flag, keeping a task that has since been dequeued. Fixing core scheduling support requires the decision to travel with the dispatch that made it. Make scx_dispatch_sched() and balance_one() return an explicit verdict instead and drop the flag's plumbing from the tools autogen enum headers. Also factor the pick-side invocation, its follow-up queueing and the post-dispatch checks out of do_pick_task_scx() into dispatch_pick(). No functional changes intended. v2: Drop the SCX_RQ_BAL_KEEP plumbing from the tools autogen enum headers as well (Andrea).
CVE-2026-89519
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-89519
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "4c95380701f58b8112f0b891de8d160e4199e19d",
"lessThan": "6f1d3bfe54430f8d54e0530a27f2ecbf8466576e",
"versionType": "git"
},
{
"status": "affected",
"version": "4c95380701f58b8112f0b891de8d160e4199e19d",
"lessThan": "ffaab58d217581cb75353168f8812a16e10463fc",
"versionType": "git"
}
],
"programFiles": [
"kernel/sched/ext/ext.c",
"kernel/sched/sched.h",
"tools/sched_ext/include/scx/enum_defs.autogen.h",
"tools/sched_ext/include/scx/enums.autogen.bpf.h",
"tools/sched_ext/include/scx/enums.autogen.h"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.19"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.19",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "7.2.4",
"versionType": "semver",
"lessThanOrEqual": "7.2.*"
},
{
"status": "unaffected",
"version": "7.3",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"kernel/sched/ext/ext.c",
"kernel/sched/sched.h",
"tools/sched_ext/include/scx/enum_defs.autogen.h",
"tools/sched_ext/include/scx/enums.autogen.bpf.h",
"tools/sched_ext/include/scx/enums.autogen.h"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-89519
Source reference:
/cveMetadata/cveId
Publisher severity
No explicit severity was provided.
- Event
- #35046 · Revision 1
- Added to Heist Feed
- Publisher date