Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
- >= 6.12, < 6.12.1
A vulnerability in the Linux kernel's scheduling system can lead to improper management of direct dispatch states for tasks. This issue arises because the direct dispatch identifier is not consistently cleared, potentially causing misleading warnings during task scheduling. The problem is particularly evident when tasks are woken up and their dispatch states are not properly reset, leading to incorrect scheduling behavior.
Failure to manage the direct dispatch state can cause spurious warnings and disrupt the intended scheduling of tasks, potentially leading to performance issues or incorrect task execution.
The vulnerability can be reproduced by creating a scenario where a task's direct dispatch state is set but not cleared before it is scheduled again. This can be done by using the SCX scheduler's direct dispatch features and then waking up the task without properly resetting its dispatch state.
Users can upgrade to the latest version of the Linux kernel where this issue has been addressed. Instructions for upgrading the kernel can be found in the official Linux kernel documentation.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.