In the Linux kernel, the following vulnerability has been resolved:
Revert "sched/fair: Make sure to try to detach at least one movable task"
This reverts commit b0defa7ae03ecf91b8bfd10ede430cff12fcbd06.
b0defa7ae03ec changed the load balancing logic to ignore env.max_loop if all tasks examined to that point were pinned. The goal of the patch was to make it more likely to be able to detach a task buried in a long list of pinned tasks. However, this has the unfortunate side effect of creating an O(n) iteration in detach_tasks(), as we now must fully iterate every task on a cpu if all or most are pinned. Since this load balance code is done with rq lock held, and often in softirq context, it is very easy to trigger hard lockups. We observed such hard lockups with a user who affined O(10k) threads to a single cpu.
When I discussed this with Vincent he initially suggested that we keep the limit on the number of tasks to detach, but increase the number of tasks we can search. However, after some back and forth on the mailing list, he recommended we instead revert the original patch, as it seems likely no one was actually getting hit by the original issue.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpfUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-staticUpgrade python3-perfUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.102-108.177Upgrade kernel-tools-develUpgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade bpftoolUpgrade kernel-modules-extra-commonUpgrade perf-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftool-debuginfo | Oct 16, 2025 | Aug 7, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Aug 7, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Dec 5, 2024 | Aug 7, 2024 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-debug-develUpgrade dtb-renesasUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade dtb-lgUpgrade kernel-develUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade dtb-amazonUpgrade kernel-default-base-rebuildUpgrade dtb-alteraUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade dtb-exynosUpgrade dtb-hisiliconUpgrade kernel-rt_debug-develUpgrade dtb-allwinnerUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-sourceUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade dtb-armUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amdUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-debug-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-azure-livepatch-develUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade reiserfs-kmp-64kbUpgrade kernel-docsUpgrade kernel-docs-htmlUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-broadcomUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade dlm-kmp-default | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-6.8.0-1016-oemUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64k | Nov 4, 2024 | Aug 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub