Skip to main content
VulnerabilityPublished Updated

CVE-2026-98418: Linux kernel · sched/core: Avoid false migration warning for proxy donors

Affects Linux kernelSource CVE Database V5

0

Not known to be exploited : upgrade to fe3c73d7bc769e7afc252f867a3421fe168b898d or e4a442da49fff7619b3cb2988e477022dcea6688 when convenient.

Data as of 26 Oct 2026, 12:55 UTC

Severity
Low

Rated Low by Threat Radar's AI analysis · CVSS not yet scored by NVD

EPSS
0.2% chance of exploitation in 30 days – higher than 10% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in fe3c73d7bc769e7afc252f867a3421fe168b898d, e4a442da49fff7619b3cb2988e477022dcea6688

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 14 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade Linux kernel to fe3c73d7bc769e7afc252f867a3421fe168b898d or e4a442da49fff7619b3cb2988e477022dcea6688.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ b049b81bdff6fc6794200a4c7d7d910e2008d57f, < fe3c73d7bc769e7afc252f867a3421fe168b898d
Fixed in
  • fe3c73d7bc769e7afc252f867a3421fe168b898d
LinuxLinuxAffected
  • ≥ b049b81bdff6fc6794200a4c7d7d910e2008d57f, < e4a442da49fff7619b3cb2988e477022dcea6688
Fixed in
  • e4a442da49fff7619b3cb2988e477022dcea6688
LinuxLinuxAffected
  • =7.1
Fixed in–

AI-suggested

A fix is available in the Linux kernel as indicated by the fixed commit versions fe3c73d7bc769e7afc252f867a3421fe168b898d and e4a442da49fff7619b3cb2988e477022dcea6688. Users should update to a kernel version including these fixes to eliminate false migration warnings related to proxy donors.

Description

CVE-2026-98418 addresses a Linux kernel vulnerability where false migration warnings occur for proxy donors. Proxy execution can move a blocked donor's scheduling context to another CPU even when migration is disabled, causing incorrect warnings. The fix excludes blocked proxy donors from triggering these warnings, preventing false positives during proxy migration or wakeup paths.

References

Community reviews

Loading reviews…