Description
In the Linux kernel, the following vulnerability has been resolved:

sched/core: Avoid false migration warning for proxy donors

Proxy execution can move a blocked donor's scheduling context to the
lock owner's CPU even when the donor is migration-disabled. The donor
does not execute there, and its original execution CPU remains recorded
in wake_cpu.

set_task_cpu() warns unconditionally for migration-disabled tasks, so a
subsequent proxy migration or the wakeup path returning the donor home
triggers a false positive: moving a blocked scheduling context does not
violate the migration-disabled execution context.

For example, creating a mutex owner on CPU1 and a migration-disabled
waiter on CPU0 can trigger the following warning:

proxy_migrate_repro: donor blocking on CPU0 with migration disabled
proxy_migrate_repro: donor moved from CPU0 to CPU1
WARNING: kernel/sched/core.c:3389 at set_task_cpu+0x1d3/0x280
...
Call Trace:
try_to_wake_up+0x43f/0x780
__mutex_unlock_slowpath+0x330/0x540
owner_fn+0x9f/0xc0 [proxy_migrate_repro]
...
proxy_migrate_repro: donor woke on CPU0, task_cpu=0
proxy_migrate_repro: completed

Exclude blocked proxy donors from the warning. The proxy wakeup path
restores an executable placement before clearing the blocked state.
Published: 2026-10-14
Score: 4.7 Medium
EPSS: < 1% Very Low
KEV: No
Impact: False positive scheduler warning, no direct security breach
Action: Assess Impact
AI Analysis

Impact

The vulnerability occurs when a blocked donor that is migration‑disabled is incorrectly flagged by set_task_cpu(), producing a warning that a blocked scheduling context was moved. The kernel incorrectly assumes the donor can be migrated, but the donor remains on its original CPU. The warning is a false positive, leading only to misleading logs and potential misdiagnosis, not exploitation.

Affected Systems

The issue is present in the Linux kernel core scheduling code, affecting all Linux‑based operating systems that use the unmodified kernel source up to the current unreleased version. No specific vendor or product version is enumerated; the affected product is Linux:Linux.

Risk and Exploitability

The CVSS score is 4.7, indicating moderate severity, and based on the description it is inferred that the bug does not contain a direct attack vector; no evidence of exploitation has been reported, and the EPSS score is < 1% while it is not listed in KEV. The likelihood of real‑world exploitation appears low. However, the false warning could disturb automated monitoring or cause confusion for system administrators.

Generated by OpenCVE AI on October 17, 2026 at 04:36 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to a Linux kernel that includes the fixes from commits e4a442d or fe3c73d.
  • If an immediate upgrade is unavailable, apply a local kernel patch derived from these commits and rebuild the kernel.
  • Configure monitoring or alerting systems to suppress or acknowledge the false migration warning to prevent alert fatigue.

Generated by OpenCVE AI on October 17, 2026 at 04:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 17 Oct 2026 03:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-564

Sat, 17 Oct 2026 01:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-564

Sat, 17 Oct 2026 00:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-617
References
Metrics threat_severity

None

cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Fri, 16 Oct 2026 23:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-668

Fri, 16 Oct 2026 07:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-668

Thu, 15 Oct 2026 23:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20
CWE-703

Thu, 15 Oct 2026 03:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20
CWE-703

Wed, 14 Oct 2026 13:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: sched/core: Avoid false migration warning for proxy donors Proxy execution can move a blocked donor's scheduling context to the lock owner's CPU even when the donor is migration-disabled. The donor does not execute there, and its original execution CPU remains recorded in wake_cpu. set_task_cpu() warns unconditionally for migration-disabled tasks, so a subsequent proxy migration or the wakeup path returning the donor home triggers a false positive: moving a blocked scheduling context does not violate the migration-disabled execution context. For example, creating a mutex owner on CPU1 and a migration-disabled waiter on CPU0 can trigger the following warning: proxy_migrate_repro: donor blocking on CPU0 with migration disabled proxy_migrate_repro: donor moved from CPU0 to CPU1 WARNING: kernel/sched/core.c:3389 at set_task_cpu+0x1d3/0x280 ... Call Trace: try_to_wake_up+0x43f/0x780 __mutex_unlock_slowpath+0x330/0x540 owner_fn+0x9f/0xc0 [proxy_migrate_repro] ... proxy_migrate_repro: donor woke on CPU0, task_cpu=0 proxy_migrate_repro: completed Exclude blocked proxy donors from the warning. The proxy wakeup path restores an executable placement before clearing the blocked state.
Title sched/core: Avoid false migration warning for proxy donors
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-19T09:19:11.970Z

Reserved: 2026-09-25T10:25:14.347Z

Link: CVE-2026-98418

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-14T14:17:53.173

Modified: 2026-10-19T10:18:47.260

Link: CVE-2026-98418

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-10-14T00:00:00Z

Links: CVE-2026-98418 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-19T19:45:02Z

Weaknesses