The Linux kernel vulnerability (CVE-2026-89521) involves the core scheduling function pick_next_task() malfunctioning when the pick_task() implementation releases the rq lock. The selection state is only valid while the lock is held continuously; releasing it allows interleaving selections that invalidate the state, potentially causing an uncookied pick or skewed accounting due to forceidle commits. The fix restarts the entire selection process upon a RETRY_TASK return after releasing the lock, resetting state and clocks to maintain consistency.

This vulnerability could lead to incorrect CPU core scheduling decisions, potentially affecting system performance or stability. However, no specific exploitation details or direct security impacts such as privilege escalation or denial of service are described in the provided information.

A fix has been implemented in the Linux kernel to address this issue by restarting the selection process when necessary to maintain consistent scheduling state. Users should apply the official kernel updates that include this fix once available. Patch status is not yet confirmed in the provided data; check the vendor advisory for current remediation guidance.