CVE-2025-38522

Source
https://cve.org/CVERecord?id=CVE-2025-38522
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38522.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-38522
Downstream
Published
2025-08-16T11:12:11.304Z
Modified
2026-04-02T12:48:00.758201Z
Summary
sched/ext: Prevent update_locked_rq() calls with NULL rq
Details

In the Linux kernel, the following vulnerability has been resolved:

sched/ext: Prevent updatelockedrq() calls with NULL rq

Avoid invoking updatelockedrq() when the runqueue (rq) pointer is NULL in the SCXCALLOP and SCXCALLOP_RET macros.

Previously, calling updatelockedrq(NULL) with preemption enabled could trigger the following warning:

BUG: using __this_cpu_write() in preemptible [00000000]

This happens because __thiscpuwrite() is unsafe to use in preemptible context.

rq is NULL when an ops invoked from an unlocked context. In such cases, we don't need to store any rq, since the value should already be NULL (unlocked). Ensure that updatelockedrq() is only called when rq is non-NULL, preventing calling __thiscpuwrite() on preemptible context.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38522.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
18853ba782bef65fc81ef2b3370382e5b479c5eb
Fixed
237c43037b336e36a49eb9f2daac1c7719ec7f8b
Fixed
e14fd98c6d66cb76694b12c05768e4f9e8c95664

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38522.json"