Linux Kernel Direct Dispatch State Management Vulnerability

Vulnerability

A vulnerability in the Linux kernel's scheduling system can lead to improper management of direct dispatch states for tasks. This issue arises because the direct dispatch identifier is not consistently cleared, potentially causing misleading warnings during task scheduling. The problem is particularly evident when tasks are woken up and their dispatch states are not properly reset, leading to incorrect scheduling behavior.

Impact

Failure to manage the direct dispatch state can cause spurious warnings and disrupt the intended scheduling of tasks, potentially leading to performance issues or incorrect task execution.

Reproduction

The vulnerability can be reproduced by creating a scenario where a task's direct dispatch state is set but not cleared before it is scheduled again. This can be done by using the SCX scheduler's direct dispatch features and then waking up the task without properly resetting its dispatch state.

Remediation

Users can upgrade to the latest version of the Linux kernel where this issue has been addressed. Instructions for upgrading the kernel can be found in the official Linux kernel documentation.

Added: May 1, 2026, 4:53 PM
Updated: May 1, 2026, 4:53 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.3
remediation
7.7
relevance
7.2
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.