CVE-2025-68333CWE-667

CVE-2025-68333

Medium · published December 22, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
1.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

sched_ext: Fix possible deadlock in the deferred_irq_workfn()

For PREEMPT_RT=y kernels, the deferred_irq_workfn() is executed in

the per-cpu irq_work/* task context and not disable-irq, if the rq

returned by container_of() is current CPU's rq, the following scenarios

may occur:

lock(&rq->__lock);

<Interrupt>

lock(&rq->__lock);

This commit use IRQ_WORK_INIT_HARD() to replace init_irq_work() to

initialize rq->scx.deferred_irq_work, make the deferred_irq_workfn()

is always invoked in hard-irq context.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00106 · 1.1th percentile
Weakness
CWE-667 · Improper Locking
Published
2025-12-22T22:16Z
Affected products (8)
ProductVersionsFixed in
linux/linux_kernel≥ 6.12, < 6.12.686.12.68
linux/linux_kernel≥ 6.13, < 6.17.126.17.12
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
EPSS history
Timeline
  • 22 DEC 16:14Z
    sched_ext: Fix possible deadlock in the deferred_irq_workfn()
    cvelistv5