Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A vulnerability in the Linux kernel's scheduler has been addressed by modifying the locking mechanism in the SCX operations bypass function. Previously, the function used rq_lock() to acquire locks while iterating through CPUs, which could lead to warnings if a CPU was offline or handling a task in a higher scheduler class, such as deadline. The rq_lock() is intended for online CPUs only. The change to raw_spin_rq_lock() prevents these unnecessary warnings and aligns the locking behavior with the CPU's state.
The vulnerability could cause misleading warnings about the CPU's scheduling state, potentially obscuring real issues that need attention.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.