In the Linux kernel, the following vulnerability has been resolved:
Revert "sched/fair: Make sure to try to detach at least one movable task"
This reverts commit b0defa7ae03ecf91b8bfd10ede430cff12fcbd06.
b0defa7ae03ec changed the load balancing logic to ignore env.max_loop if all tasks examined to that point were pinned. The goal of the patch was to make it more likely to be able to detach a task buried in a long list of pinned tasks. However, this has the unfortunate side effect of creating an O(n) iteration in detach_tasks(), as we now must fully iterate every task on a cpu if all or most are pinned. Since this load balance code is done with rq lock held, and often in softirq context, it is very easy to trigger hard lockups. We observed such hard lockups with a user who affined O(10k) threads to a single cpu.
When I discussed this with Vincent he initially suggested that we keep the limit on the number of tasks to detach, but increase the number of tasks we can search. However, after some back and forth on the mailing list, he recommended we instead revert the original patch, as it seems likely no one was actually getting hit by the original issue.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-livepatch-6.1.102-108.177Upgrade kernel-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-modules-extra-commonUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-tools | Oct 16, 2025 | Aug 7, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 2, 2024 | Aug 7, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Aug 7, 2024 |
| Suse | — | Upgrade dtb-xilinxUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade dtb-lgUpgrade kernel-debug-develUpgrade dtb-caviumUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-rt-extraUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade ocfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade reiserfs-kmp-defaultUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-debugUpgrade dtb-amazonUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-rtUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade kernel-default-optionalUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade dtb-exynosUpgrade dtb-renesasUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-rt-vdsoUpgrade dtb-amdUpgrade kernel-rtUpgrade ocfs2-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-azure-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-develUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-kvmsmallUpgrade kselftests-kmp-rtUpgrade kernel-syms-rtUpgrade dtb-nvidia | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-48-lowlatencyUpgrade linux-image-oem-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1016-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-ibm-classicUpgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1015-oracleUpgrade linux-image-virtualUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1013-gkeUpgrade linux-image-oracleUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-genericUpgrade linux-image-6.8.0-48-generic-64kUpgrade linux-image-6.8.0-1017-nvidia-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1016-azure-fdeUpgrade linux-image-6.8.0-1014-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1016-azureUpgrade linux-image-6.8.0-1017-nvidia-64kUpgrade linux-image-6.8.0-1014-ibmUpgrade linux-image-gcpUpgrade linux-image-6.8.0-48-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1017-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1017-azureUpgrade linux-image-6.8.0-1017-nvidia-lowlatencyUpgrade linux-image-oem-22.04bUpgrade linux-image-azureUpgrade linux-image-6.8.0-48-genericUpgrade linux-image-6.8.0-1018-awsUpgrade linux-image-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1017-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1015-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1016-oemUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1017-azure-fdeUpgrade linux-image-generic-64k-hwe-22.04 | Nov 4, 2024 | Aug 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub