CVE-2025-38012
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
18/06/2025
Last modified:
18/06/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
sched_ext: bpf_iter_scx_dsq_new() should always initialize iterator<br />
<br />
BPF programs may call next() and destroy() on BPF iterators even after new()<br />
returns an error value (e.g. bpf_for_each() macro ignores error returns from<br />
new()). bpf_iter_scx_dsq_new() could leave the iterator in an uninitialized<br />
state after an error return causing bpf_iter_scx_dsq_next() to dereference<br />
garbage data. Make bpf_iter_scx_dsq_new() always clear $kit->dsq so that<br />
next() and destroy() become noops.