CVE-2025-21965

sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl()

published April 1, 2025

CVSS
—
EPSS
0%
Percentile
8.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl()

If a BPF scheduler provides an invalid CPU (outside the nr_cpu_ids

range) as prev_cpu to scx_bpf_select_cpu_dfl() it can cause a kernel

crash.

To prevent this, validate prev_cpu in scx_bpf_select_cpu_dfl() and

trigger an scx error if an invalid CPU is specified.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00197 · 8.9th percentile
Published
2025-04-01T15:47Z
EPSS history
Timeline
  • 01 APR 15:47Z
    sched_ext: Validate prev_cpu in scx_bpf_select_cpu_dfl()
    cvelistv5