{"apiVersion":"1.0","identifier":"CVE-2026-74593","description":"In the Linux kernel, the following vulnerability has been resolved: sched_ext: Take cgroup_lock() first in scx_cgroup_lock() scx_cgroup_lock() write-locks scx_cgroup_ops_rwsem and then takes cgroup_lock(), which can deadlock through kernfs: scx enable/disable cgroup rmdir cpu.weight write ------------------ ------------ ---------------- cgroup_lock() percpu_down_write(rwsem) cgroup_lock() kernfs_get_active() percpu_down_read(rwsem) kernfs_drain() The enable path waits for the rmdir to release cgroup_mutex. The rmdir, deactivating the cpu controller-s files, waits in kernfs_drain() for the write-s active reference. The write, in scx_group_set_weight(), waits for the rwsem behind the pending writer. Take cgroup_lock() first. The set_* paths take no cgroup locks inside the read side, so a pending write-lock then only waits for read sections that always run to completion, and no dependency from the rwsem back to cgroup_mutex remains.","publishedAt":"2026-08-22T16:16:31","lastModifiedAt":"2026-08-23T13:16:45","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-74593","cvssScore":null,"cvssVector":"Pending","epssProbability":0.00166,"riskScore":0,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-74593","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-74593","en":"https://www.redsauce.net/en/cves/CVE-2026-74593","fr":"https://www.redsauce.net/fr/cves/CVE-2026-74593","pt":"https://www.redsauce.net/pt/cves/CVE-2026-74593","de":"https://www.redsauce.net/de/cves/CVE-2026-74593","sk":"https://www.redsauce.net/sk/cves/CVE-2026-74593","el":"https://www.redsauce.net/el/cves/CVE-2026-74593"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-74593"}}