# CVE-2026-98418: linux: In the Linux kernel, the following vulnerability has been resolved:  sched/core: Avoid false migration warning for pr...

CVE-2026-98418 is fixed in linux on 1 platform by DEBIAN-CVE-2026-98418 (version 7.2.8-1), released October 16, 2026. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2026-98418
- Priority: Routine
- CVSS: n/a
- EPSS: 0.0021
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Oct 14, 2026

## Description

In the Linux kernel, the following vulnerability has been resolved:  sched/core: Avoid false migration warning for proxy donors  Proxy execution can move a blocked donor's scheduling context to the lock owner's CPU even when the donor is migration-disabled. The donor does not execute there, and its original execution CPU remains recorded in wake_cpu.  set_task_cpu() warns unconditionally for migration-disabled tasks, so a subsequent proxy migration or the wakeup path returning the donor home triggers a false positive: moving a blocked scheduling context does not violate the migration-disabled execution context.  For example, creating a mutex owner on CPU1 and a migration-disabled waiter on CPU0 can trigger the following warning:    proxy_migrate_repro: donor blocking on CPU0 with migration disabled   proxy_migrate_repro: donor moved from CPU0 to CPU1   WARNING: kernel/sched/core.c:3389 at set_task_cpu+0x1d3/0x280   ...   Call Trace:    try_to_wake_up+0x43f/0x780    __mutex_unlock_slowpath+0x330/0x540    owner_fn+0x9f/0xc0 [proxy_migrate_repro]   ...   proxy_migrate_repro: donor woke on CPU0, task_cpu=0   proxy_migrate_repro: completed  Exclude blocked proxy donors from the warning. The proxy wakeup path restores an executable placement before clearing the blocked state.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | linux Debian 14 | 7.2.8-1 | [DEBIAN-CVE-2026-98418](https://patchblox.com/security/data/fix/linux/debian-cve-2026-98418.md) | Oct 16, 2026 |

---

Data as of 2026-11-08T13:06:02Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.