CVE-2022-48944

MEDIUM

Linux Kernel 5.15.3-5.15.26 and 5.16.0-5.16.12 - Denial of Service via sched_fork Race Condition

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: sched: Fix yet more sched_fork() races Where commit 4ef0c5c6b5ba ("kernel/sched: Fix sched_fork() access an invalid sched_task_group") fixed a fork race vs cgroup, it opened up a race vs syscalls by not placing the task on the runqueue before it gets exposed through the pidhash. Commit 13765de8148f ("sched/fair: Fix fault in reweight_entity") is trying to fix a single instance of this, instead fix the whole class of issues, effectively reverting this commit.

Scores

CVSS v3 5.5
EPSS 0.0021
EPSS Percentile 11.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

Status published
Products (18)
linux/Kernel < 5.15.27linux
linux/Kernel 5.16.0 - 5.16.13linux
Linux/Linux < 5.16
Linux/Linux 25d40b828fb855ee62e1039c65a666c9afd60786
Linux/Linux 3869eecf050416a1d19bac60926f6b5d64b0aa58 - 3411613611a5cddf7e80908010dc87cb527dd13b
Linux/Linux 4ef0c5c6b5ba1f38f0ea1cedad0cad722f00c14a - b1e8206582f9d680cff7d04828708c8b6ab32957
Linux/Linux 4ef0c5c6b5ba1f38f0ea1cedad0cad722f00c14a - c65cfd89cef669d90c59f3bf150af6458137a04f
Linux/Linux 5.10.80 - 5.11
Linux/Linux 5.14.19 - 5.15
Linux/Linux 5.15.27 - 5.15.*
... and 8 more
Published Aug 30, 2024
Tracked Since Feb 18, 2026