Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
- >= 6.15, < 6.15.0-rc1
A vulnerability in the Linux kernel's scheduler has been addressed, specifically related to the handling of runqueue pointers in certain macros. The issue arose because the 'update_locked_rq()' function was called with a NULL runqueue pointer while preemption was enabled, leading to a warning about unsafe operations in a preemptible context. This situation occurred when operations were invoked from an unlocked context, where the runqueue pointer should naturally be NULL. The vulnerability has been fixed by ensuring that 'update_locked_rq()' is only called when the runqueue pointer is not NULL, thus preventing unsafe operations in preemptible contexts.
The vulnerability could cause warnings about unsafe CPU operations in preemptible contexts, which could potentially lead to incorrect scheduling behavior.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available in the Linux kernel documentation.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.