{
  "cveId": "CVE-2026-93220",
  "url": "https://patchblox.com/security/cve/CVE-2026-93220",
  "summary": "CVE-2026-93220 is fixed in linux on 1 platform by DEBIAN-CVE-2026-93220 (version 7.2.6-1), released September 24, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Keep kick_sync waiting on the rq\u0027s ow...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  sched_ext: Keep kick_sync waiting on the rq\u0027s own CPU  kick_sync_wait_bal_cb() assumes it runs on the rq\u0027s CPU from the __schedule() tail: the snapshots it compares against live in that CPU\u0027s percpu area and the busy-wait runs with the rq lock dropped and IRQs enabled.  However, dispatch can now drop the rq lock while the callback sits queued, and rq lock takers in that window (the sched class change paths, the scx task iterator) flush pending balance callbacks on release, running the callback on a foreign CPU. Such a run compares against unrelated snapshots and can deadlock when the executing CPU is itself a wait target.  Bail on a foreign CPU and leave the wait state alone. The wait only observes progress that the resched kicks already guarantee and the rq\u0027s next wait picks up the stale cpus_to_sync bits.",
  "published": "2026-09-24T16:17:17Z",
  "severity": "",
  "epss": 0.00155,
  "epssPercentile": 0.04716,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.6-1",
      "fix": "DEBIAN-CVE-2026-93220",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-93220",
      "released": "2026-09-24T19:30:44Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T13:31:49Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}