https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 08:43:10 +0000 https://vulnerability.circl.lu/vuln/cve-2026-89516 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>sched_ext: Don&#39;t BUG_ON a destroyed DSQ in process_deferred_reenq_users</p> <p>scx_bpf_dsq_reenq() queues a deferred reenq (dru) that runs from run_deferred(), not ops.dispatch(). If the DSQ is destroyed before the dru runs, process_deferred_reenq_users() sees dsq-&gt;id == SCX_DSQ_INVALID and hits the BUG_ON. destroy_dsq() doesn&#39;t flush pending drus, so just skip.</p> <p>tj: Read dsq-&gt;id once with READ_ONCE(). Reading it separately in the INVALID check and the BUG_ON would leave a window where destroy_dsq() can invalidate the id between the two reads and still trigger the BUG_ON.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>sched_ext: Don&#39;t BUG_ON a destroyed DSQ in process_deferred_reenq_users</p> <p>scx_bpf_dsq_reenq() queues a deferred reenq (dru) that runs from run_deferred(), not ops.dispatch(). If the DSQ is destroyed before the dru runs, process_deferred_reenq_users() sees dsq-&gt;id == SCX_DSQ_INVALID and hits the BUG_ON. destroy_dsq() doesn&#39;t flush pending drus, so just skip.</p> <p>tj: Read dsq-&gt;id once with READ_ONCE(). Reading it separately in the INVALID check and the BUG_ON would leave a window where destroy_dsq() can invalidate the id between the two reads and still trigger the BUG_ON.</p> https://vulnerability.circl.lu/vuln/cve-2026-89516