Back Linuxsecurity

Fedora 44 rust-scx_rusty Critical Buffer Overflow CVE-2026

Linuxsecurity •LinuxSecurity Advisories • March 31, 2026

A multi-domain, BPF / user space hybrid scheduler used within sched_ext, which is a Linux kernel feature which enables implementing kernel thread schedulers in BPF and dynamically loading them. Update Information : Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

A multi-domain, BPF / user space hybrid scheduler used within sched_ext,

which is a Linux kernel feature which enables implementing kernel thread

schedulers in BPF and dynamically loading them.

Rebuilt with rust-tar 0.4.45 for CVE-2026-33056

* Mon Mar 23 2026 Benjamin A. Beasley - 0.5.4-8 - Rebuilt with rust-tar 0.4.45 for CVE-2026-33056 - Update License based on a current Rawhide build

Fedora Update Notification FEDORA-2026-2d77e9f2c0 2026-03-31 14:46:13.737867+00:00 Name : rust-scx_rusty Product : Fedora 44 Version : 0.5.4 Release : 8.fc44 URL : Summary : A multi-domain, BPF / user space hybrid scheduler Description : A multi-domain, BPF / user space hybrid scheduler used within sched_ext, which is a Linux kernel feature which enables implementing kernel thread schedulers in BPF and dynamically loading them.

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-2d77e9f2c0' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical CVE-2026-33056 Affects Fedora 44 Scheduler Components On March 20, 2026, CVE-2026-33056 was published, affecting multiple components of Fedora 44, specifically the rust-scx_rustland, rust-scx_layered, and rust-scx_rusty packages. These components utilize a BPF feature within the Linux kernel, allowing for the implementation of kernel thread schedulers. The vulnerabilities were addressed in updates that rebuilt these components with rust-tar 0.4.45. The updates were released on March 31, 2026, and can be installed using the 'dnf' update program. Users of Fedora 44 are advised to apply these updates promptly to mitigate potential exploitation. The vulnerabilities are categorized as significant due to their potential impact on system performance and security. The updates include license adjustments based on current Rawhide builds. No active exploitation has been reported as of the latest updates. 3 sources 58

Extracted Entities

Fedora 44 rust-scx_rusty Critical Buffer Overflow CVE-2026

The full story

Extracted Entities

Companies (1)

CVEs (1)

Platforms (1)