Skip to main content
VulnerabilityPublished

CVE-2026-98542: Linux kernel · cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus

Affects Linux kernelSource CVE Database V5

0

Not known to be exploited · fixed in 0751ab665cb3dcdac224b002565f2e28461740d5 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 17:16 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD

EPSS
0.1% chance of exploitation in 30 days – higher than 9% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in 0751ab665cb3dcdac224b002565f2e28461740d5, 241e67b60308cdce25bba66616a109759edd1d40, 31c88350b7dd1522792f726f79607f31bb55c50f

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 18 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade Linux kernel to 0751ab665cb3dcdac224b002565f2e28461740d5, 241e67b60308cdce25bba66616a109759edd1d40 or 31c88350b7dd1522792f726f79607f31bb55c50f.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 86888c7bd117c29eab169c37e5f6bbbf583da983, < 0751ab665cb3dcdac224b002565f2e28461740d5
Fixed in
  • 0751ab665cb3dcdac224b002565f2e28461740d5
LinuxLinuxAffected
  • ≥ 86888c7bd117c29eab169c37e5f6bbbf583da983, < 241e67b60308cdce25bba66616a109759edd1d40
Fixed in
  • 241e67b60308cdce25bba66616a109759edd1d40
LinuxLinuxAffected
  • ≥ 86888c7bd117c29eab169c37e5f6bbbf583da983, < 31c88350b7dd1522792f726f79607f31bb55c50f
Fixed in
  • 31c88350b7dd1522792f726f79607f31bb55c50f
LinuxLinuxAffected
  • =6.16
Fixed in–

AI-suggested

A fix has been implemented and merged into the Linux kernel, identified by specific commit hashes. Users should update to a Linux kernel version that includes these fixes to resolve the issue. No additional mitigation steps are indicated or required beyond applying the official patch.

Description

A vulnerability in the Linux kernel cgroup cpuset subsystem allows conflicting exclusive CPU assignments between remote and local partitions. This occurs when remote_partition_enable() enables a remote partition on CPUs already claimed by an ancestor local partition, leading to inconsistent CPU exclusivity states. The issue was identified in Linux kernel version 6.16 and fixed by returning an error code (PERR_NOCPUS) to prevent such conflicts.

References

Community reviews

Loading reviews…