CVE-2026-64374

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT

RT migration is done aggressively. When a CPU schedules out a high

priority RT task for a lower priority task, it will look to see if there's

any RT tasks that are waiting to run on another CPU that is of higher

priority than the task this CPU is about to run. If it finds one, it will

pull that task over to the CPU and allow it to run there instead.

Normally, this pulling is done by looking at the RT overloaded mask (rto)

which contains all the CPUs in the scheduler domain with RT tasks that are

waiting to run due to a higher priority RT task currently running on their

CPU. The CPU that is about to schedule a lower priority task will grab the

rq lock of the overloaded CPU and move the RT task from that CPU's runqueue

to the local one and schedule the higher priority RT task.

This caused issues when a lot of CPUs would schedule a lower priority task

at the

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References