Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-21965

sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl() If a BPF scheduler provides an invalid CPU (outside the nr_cpu_ids range) as prev_cpu to scx_bpf_select_cpu_dfl() it can cause a kernel crash. To prevent this, validate prev_cpu in scx_bpf_select_cpu_dfl() and trigger an scx error if an invalid CPU is specified.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • f0e1a0643a59bf1f922fa209cec86a170b784f3f to < 752b56bb76e2471197d25d6948d85753043b10daaffected
  • f0e1a0643a59bf1f922fa209cec86a170b784f3f to < 515680e76c536dd4aa8e2b5d674b0d441baddf5baffected
  • f0e1a0643a59bf1f922fa209cec86a170b784f3f to < 9360dfe4cbd62ff1eb8217b815964931523b75b3affected

Linux Linux

Default version status: affected

  • 6.12affected
  • 0 to < 6.12unaffected
  • 6.12.20 to ≤ 6.12.*unaffected
  • 6.13.8 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References