In the Linux kernel, the following vulnerability has been resolved:
sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
child_cfs_rq_on_list attempts to convert a 'prev' pointer to a cfs_rq. This 'prev' pointer can originate from struct rq's leaf_cfs_rq_list, making the conversion invalid and potentially leading to memory corruption. Depending on the relative positions of leaf_cfs_rq_list and the task group (tg) pointer within the struct, this can cause a memory fault or access garbage data.
The issue arises in list_add_leaf_cfs_rq, where both cfs_rq->leaf_cfs_rq_list and rq->leaf_cfs_rq_list are added to the same leaf list. Also, rq->tmp_alone_branch can be set to rq->leaf_cfs_rq_list.
This adds a check `if (prev == &rq->leaf_cfs_rq_list)` after the main conditional in child_cfs_rq_on_list. This ensures that the container_of operation will convert a correct cfs_rq struct.
This check is sufficient because only cfs_rqs on the same CPU are added to the list, so verifying the 'prev' pointer against the current rq's list head is enough.
Fixes a potential memory corruption issue that due to current struct layout might not be manifesting as a crash but could lead to unpredictable behavior when the layout changes.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-headersUpgrade kernel-rt-64k-debug-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-debug-develUpgrade kernel-64k-coreUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-debug-modules-coreUpgrade libperfUpgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64kUpgrade kernel-64k-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-64k-coreUpgrade kernel-rt-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debugUpgrade kernelUpgrade rtlaUpgrade kernel-rt-64kUpgrade rvUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rtUpgrade perfUpgrade kernel-coreUpgrade kernel-64k-debug-develUpgrade kernel-debugUpgrade kernel-64k-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-64k-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-develUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-kvmUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-uki-virt | Jul 4, 2025 | Apr 1, 2025 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.179-121.185Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-devel | Apr 25, 2025 | Apr 1, 2025 |
| Amazon_linux_2023 | — | Upgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.131-143.221Upgrade perfUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.130-139.222Upgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel | Apr 30, 2025 | Apr 1, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Apr 14, 2025 | Apr 1, 2025 |
| Oracle_linux | — | Upgrade kernel | Jun 30, 2025 | Apr 1, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jun 26, 2025 | Apr 1, 2025 |
| Rocky_linux | — | Upgrade rtlaUpgrade kernel-debuginfo-common-x86_64Upgrade libperfUpgrade kernel-headersUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade perf-debuginfoUpgrade libperf-debuginfoUpgrade kernel-develUpgrade kernel-uki-virt-addonsUpgrade kernel-toolsUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debug-debuginfoUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-kvmUpgrade kernel-debuginfo-common-s390xUpgrade python3-perfUpgrade kernel-rtUpgrade rvUpgrade kernel-rt-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-uki-virtUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-debug-uki-virtUpgrade bpftoolUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debuginfo | Oct 6, 2025 | Oct 4, 2025 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade dtb-caviumUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-64kbUpgrade kernel-rt-optionalUpgrade kselftests-kmp-azureUpgrade dtb-appleUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-devel-azureUpgrade dtb-marvellUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade dtb-amazonUpgrade kernel-debugUpgrade kernel-debug-develUpgrade dtb-exynosUpgrade dtb-amdUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-azureUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade dtb-renesasUpgrade kernel-azure-extraUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-rtUpgrade dtb-qcomUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-devel-rtUpgrade kernel-azure-develUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade kernel-docsUpgrade dtb-apmUpgrade cluster-md-kmp-defaultUpgrade kernel-develUpgrade kernel-defaultUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-default-baseUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade kernel-rt-livepatch-develUpgrade dtb-xilinxUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-optionalUpgrade kselftests-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade kernel-obs-qaUpgrade kernel-rt-extraUpgrade kselftests-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-rtUpgrade dtb-nvidiaUpgrade dlm-kmp-default | Dec 5, 2025 | Jul 31, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-fipsUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-140-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.1-1034-realtimeUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-5.15.0-140-generic-64kUpgrade linux-image-6.8.0-1025-azure-nvidiaUpgrade linux-image-6.8.0-1039-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-84-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-fipsUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fde-6.11Upgrade linux-image-azureUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1039-aws-64kUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1037-nvidia-tegra-rtUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-6.8.0-1039-awsUpgrade linux-image-5.15.0-1078-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1026-nvidia-tegra-igxUpgrade linux-image-6.8.0-1023-gkeopUpgrade linux-image-5.15.0-1083-gcp-fipsUpgrade linux-image-6.8.0-1037-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1066-gkeopUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.8.0-1039-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1089-azureUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1081-gkeUpgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1039-nvidia-lowlatencyUpgrade linux-image-5.15.0-1079-intel-iotgUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1040-gcpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1078-nvidia-lowlatencyUpgrade linux-image-6.8.0-1037-oracle-64kUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-kvmUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1077-intel-iot-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-azure-nvidiaUpgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-6.11Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04aUpgrade linux-image-azure-fde-edgeUpgrade linux-image-5.15.0-1089-azure-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-virtual-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1081-oracleUpgrade linux-image-gke-6.8Upgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intelUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1039-raspiUpgrade linux-image-nvidia-tegraUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1083-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1036-gke-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-85-genericUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1037-nvidia-tegraUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-84-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1036-azure-fdeUpgrade linux-image-6.8.0-1037-oracleUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-5.15.0-140-lowlatency-64kUpgrade linux-image-5.15.0-1026-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtimeUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1038-azureUpgrade linux-image-5.15.0-1084-awsUpgrade linux-image-6.8.0-1036-gkeUpgrade linux-image-5.15.0-1084-realtimeUpgrade linux-image-oem-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1078-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-84-lowlatencyUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-6.8.0-85-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-84-generic-64kUpgrade linux-image-6.8.0-1038-azure-fdeUpgrade linux-image-6.8.0-1036-azureUpgrade linux-image-6.11.0-1015-awsUpgrade linux-image-5.15.0-140-genericUpgrade linux-image-5.15.0-1080-kvmUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-gcpUpgrade linux-image-6.11.0-28-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-140-fipsUpgrade linux-image-6.8.0-1039-nvidiaUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-140-generic-lpaeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1040-gcp-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-6.11Upgrade linux-image-6.8.0-2031-raspi-realtimeUpgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-5.15.0-1084-aws-fipsUpgrade linux-image-5.15.0-1076-ibm | May 20, 2025 | Apr 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Apr 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub