CVE-2026-43392
Gravedad CVSS v3.1:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
08/05/2026
Última modificación:
26/05/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
sched_ext: Fix starvation of scx_enable() under fair-class saturation<br />
<br />
During scx_enable(), the READY -> ENABLED task switching loop changes the<br />
calling thread&#39;s sched_class from fair to ext. Since fair has higher<br />
priority than ext, saturating fair-class workloads can indefinitely starve<br />
the enable thread, hanging the system. This was introduced when the enable<br />
path switched from preempt_disable() to scx_bypass() which doesn&#39;t protect<br />
against fair-class starvation. Note that the original preempt_disable()<br />
protection wasn&#39;t complete either - in partial switch modes, the calling<br />
thread could still be starved after preempt_enable() as it may have been<br />
switched to ext class.<br />
<br />
Fix it by offloading the enable body to a dedicated system-wide RT<br />
(SCHED_FIFO) kthread which cannot be starved by either fair or ext class<br />
tasks. scx_enable() lazily creates the kthread on first use and passes the<br />
ops pointer through a struct scx_enable_cmd containing the kthread_work,<br />
then synchronously waits for completion.<br />
<br />
The workfn runs on a different kthread from sch->helper (which runs<br />
disable_work), so it can safely flush disable_work on the error path<br />
without deadlock.
Impacto
Puntuación base 3.x
5.50
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.12.1 (incluyendo) | 6.12.78 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (incluyendo) | 6.18.20 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (incluyendo) | 6.19.9 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:6.12:-:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.12:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.12:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.12:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.12:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.12:rc6:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:6.12:rc7:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página



