Linux Kernel PREEMPT_RT Deadlock Vulnerability in Deferred IRQ Work Function

Vulnerability

A potential deadlock vulnerability has been identified in the Linux kernel's scheduling extension, specifically within PREEMPT_RT enabled kernels. The issue arises in the deferred_irq_workfn() function, which is processed in a per-CPU irq_work task context without disabling interrupts. If the run queue (rq) associated with the current CPU is accessed, a deadlock can occur. This happens because the function can be interrupted while holding a lock, leading to a scenario where two interrupts try to acquire the same lock simultaneously, causing a deadlock. The vulnerability affects several versions of the Linux kernel.

Impact

Exploitation of this vulnerability can lead to a deadlock situation, where the system becomes unresponsive due to two interrupts trying to acquire the same lock at the same time, causing a standstill in processing.

Remediation

The vulnerability has been addressed by modifying the initialization of the deferred IRQ work to ensure it is always executed in a hard interrupt context, preventing the possibility of a deadlock. Users should upgrade to the latest version of the Linux kernel where this fix has been applied.

Added: Dec 22, 2025, 5:21 PM
Updated: Dec 22, 2025, 5:21 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
7.7
relevance
1.6
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.