CVE-2026-93150
Received
Received - Intake
BaseFortify
Vulnerability report for CVE-2026-93150, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-09-17
Last updated on: 2026-09-17
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
cgroup/cpuset: Make nr_deadline_tasks an atomic_t
The nr_deadline_tasks variable in the cpuset structure was introduced by
commit 6c24849f5515 ("sched/cpuset: Keep track of SCHED_DEADLINE task
in cpusets"). It is reported by sashiko [1] that nr_deadline_tasks
can currently be modified by inc_dl_tasks_cs() under rq->lock and
by cpuset_attach() under cpuset_mutex. So if both updates happen
simultaneously, the nr_deadline_tasks variable can be corrupted leading
to incorrect operations down the road.
Fix that by changing its type to atomic_t so that nr_deadline_tasks
are always atomically updated. This fix patch is a low hanging fruit.
It can handle some of the races between a concurrent sched_setscheduler()
and cpuset_can_attach()/cpuset_attach() calls, but not all of them like
the other issue raised by sashiko [2]. This will be handled hopefully
in a future follow up patch.
[1] https://sashiko.dev/#/patchset/20260626181923.133658-1-longman%40redhat.com
[2] https://sashiko.dev/#/patchset/20260630033344.352702-1-longman%40redhat.com
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 6c24849f5515e4966d94fa5279bdff4acf2e9489 |
| Linux | Linux | 6c24849f5515e4966d94fa5279bdff4acf2e9489 |
| Linux | Linux | 6c24849f5515e4966d94fa5279bdff4acf2e9489 |
| Linux | Linux | 6c24849f5515e4966d94fa5279bdff4acf2e9489 |
| Linux | Linux | 5ac05ce5684315d0e71194a63febaf33921c3268 |
| Linux | Linux | 43d8cbfefa7c59bd3b5fe184535eca476d45304e |
| Linux | Linux | d1b4262b78cc7638642833252ae92fc586854ffb |
| Linux | Linux | 74fac5bb0d375d6b8f5e7997925063c509089c9c |
| Linux | Linux | 5.10.193 |
| Linux | Linux | 5.15.129 |
| Linux | Linux | 6.1.50 |
| Linux | Linux | 6.4.13 |
| Linux | Linux | 6.5 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
