# CVE-2026-89518: linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Fix this_rq() assumptions in dispatch...

CVE-2026-89518 is fixed in linux on 1 platform by DEBIAN-CVE-2026-89518 (version 7.2.6-1), released September 23, 2026. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2026-89518
- Priority: Routine
- CVSS: n/a
- EPSS: 0.0020
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Sep 11, 2026

## Description

In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Fix this_rq() assumptions in dispatch kfuncs  Under core scheduling, dispatch runs from within the core-wide pick and can target a sibling rq, so ops.dispatch() may execute on a CPU different from the dispatched rq's. Several kfunc paths assumed the two always coincide:  - scx_dsq_move() decided whether an rq lock is held by testing this_rq()'s   rq flags and lock-danced accordingly. A dispatch for a sibling took the   unlocked-context branch and acquired the source rq lock on top of the   already held dispatched rq lock which could deadlock.  - scx_bpf_sub_dispatch() dispatched this_rq() with its stashed   sub_dispatch_prev, which is NULL when dispatching for a sibling.  - finish_dispatch(), scx_bpf_dsq_reenq() and scx_bpf_dsq_nr_queued()   resolved SCX_DSQ_LOCAL to this CPU's local DSQ rather than the dispatched   rq's. The latter two are callable from other rq-locked operations too,   where SCX_DSQ_LOCAL now likewise resolves to the op's rq. This changes   behavior also without core scheduling, e.g. for ops.enqueue() running a   remote wakeup on the waking CPU, and is intended: which CPU happens to   execute an operation is incidental, the op's rq is what it is operating   on, and the resolution now matches the insert side where SCX_DSQ_LOCAL   dispatches land on the task's rq.  Use the rq tracked by scx_locked_rq(), which is set to the dispatched rq around ops invocations and NULL in unlocked contexts.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | linux Debian 14 | 7.2.6-1 | [DEBIAN-CVE-2026-89518](https://patchblox.com/security/data/fix/linux/debian-cve-2026-89518.md) | Sep 23, 2026 |

---

Data as of 2026-11-09T13:31:49Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.