A use-after-free vulnerability in the Linux kernel sched_ext component allows local authenticated attackers to achieve high impact across confidentiality, integrity, and availability.

This is a use-after-free vulnerability located in the scx_root_enable_workfn initialization failure path, requiring local access with low privileges and no user interaction.

A successful exploit of this use-after-free vulnerability can lead to total system compromise, resulting in arbitrary code execution, complete data exposure, and kernel panics causing system downtime. The CVSS score of 7.8 places this firmly in the high severity range, reflecting the severe consequences of local privilege escalation or kernel memory corruption within a multi-tenant or enterprise environment.

Immediate Action: Update the Linux kernel to version 6.12.92, 6.18.34, 7.0.11, or later depending on the active distribution branch.

Proactive Monitoring: Monitor system logs for kernel crash dumps, segmentation faults, or unexpected reboots that may indicate memory corruption attempts.

Compensating Controls: Restrict local shell access and apply strict user permission controls to limit the number of users capable of executing untrusted code on the host.

Public Exploit Available: No

Given the high severity CVSS score of 7.8 and the potential for complete kernel compromise, system administrators must prioritize patching the Linux kernel. Apply the recommended kernel updates immediately to eliminate the use-after-free condition in the sched_ext subsystem.