Threats tagged 'ghsa-32g6-m5fv-fhv6'

CVE-2025-21897 is a medium severity vulnerability in the Linux kernel scheduler extension (sched_ext). It involves the pick_task_scx() function incorrectly selecting non-runnable tasks under certain conditions, leading to potential deadlocks caused by tasks being in an inconsistent state (not on runqueue but marked on CPU). This flaw arises from improper checks in the workaround code for cases where pick_task_scx() is called without a preceding balance_scx() call. The issue has been fixed by correcting the condition to check if the task is actually queued.