Linux Kernel Vulnerability in Runqueue Management by Vendor

CVE-2025-38522

What is CVE-2025-38522?

A vulnerability has been identified in the Linux kernel that allows for unsafe handling of the runqueue pointer (rq) within preemptible contexts. Specifically, the risk arises when invoking the update_locked_rq() function with a NULL rq, leading to potential system instability. The mitigation involves ensuring that update_locked_rq() is called only when rq is valid, hence safeguarding against the risks associated with invoking certain operations in preemptible conditions. These fixes enhance the reliability and security of Linux systems.

References