In the Linux kernel, a race condition in the sched_ext module allows a sub‑scheduler that does not link into the scheduler hierarchy to be torn down while a root scheduler is being disabled; this leaves orphaned tasks and triggers a use‑after‑free during the task walk. The flaw can result in kernel memory corruption and arbitrary code execution by an attacker capable of influencing scheduler behavior or process creation.

The flaw affects the Linux kernel, as identified by the CNA vendor listing. No specific kernel release or configuration is announced, so any kernel compiled with the sched_ext feature that has not been patched remains potentially vulnerable.

The EPSS score is below 1%, indicating a very low but nonzero exploitation probability, and the flaw is not listed in the CISA KEV catalog. The CVSS score of 7.8 indicates high severity, reflecting the risk of kernel memory corruption via a use‑after‑free race. The attack vector is not explicitly described in the CVE data; based on the description, it is inferred that a local attacker who can influence scheduler configuration or spawn processes could trigger the race, potentially leading to code execution in kernel space