-

CVE-2026-93150

cgroup/cpuset: Make nr_deadline_tasks an atomic_t

In the Linux kernel, the following vulnerability has been resolved:

cgroup/cpuset: Make nr_deadline_tasks an atomic_t

The nr_deadline_tasks variable in the cpuset structure was introduced by
commit 6c24849f5515 ("sched/cpuset: Keep track of SCHED_DEADLINE task
in cpusets"). It is reported by sashiko [1] that nr_deadline_tasks
can currently be modified by inc_dl_tasks_cs() under rq->lock and
by cpuset_attach() under cpuset_mutex. So if both updates happen
simultaneously, the nr_deadline_tasks variable can be corrupted leading
to incorrect operations down the road.

Fix that by changing its type to atomic_t so that nr_deadline_tasks
are always atomically updated. This fix patch is a low hanging fruit.
It can handle some of the races between a concurrent sched_setscheduler()
and cpuset_can_attach()/cpuset_attach() calls, but not all of them like
the other issue raised by sashiko [2]. This will be handled hopefully
in a future follow up patch.

[1] https://sashiko.dev/#/patchset/20260626181923.133658-1-longman%40redhat.com
[2] https://sashiko.dev/#/patchset/20260630033344.352702-1-longman%40redhat.com
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 6c24849f5515e4966d94fa5279bdff4acf2e9489
Version < e422b32e6a57269ca8164c60674a78bee85cf5fb
Status affected
Version 6c24849f5515e4966d94fa5279bdff4acf2e9489
Version < e5965ae3f7c918151b87e5c925b7978afbeaf638
Status affected
Version 6c24849f5515e4966d94fa5279bdff4acf2e9489
Version < 78d9daf5e13ad1448b7dfebac949936710ec7565
Status affected
Version 6c24849f5515e4966d94fa5279bdff4acf2e9489
Version < 95220e1f18f6321008f021abc7d6f581f64bcb82
Status affected
Version 5ac05ce5684315d0e71194a63febaf33921c3268
Status affected
Version 43d8cbfefa7c59bd3b5fe184535eca476d45304e
Status affected
Version d1b4262b78cc7638642833252ae92fc586854ffb
Status affected
Version 74fac5bb0d375d6b8f5e7997925063c509089c9c
Status affected
Version 5.10.193
Version < 5.11
Status affected
Version 5.15.129
Version < 5.16
Status affected
Version 6.1.50
Version < 6.2
Status affected
Version 6.4.13
Version < 6.5
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.5
Status affected
Version 0
Version < 6.5
Status unaffected
Version <= 6.12.*
Version 6.12.110
Status unaffected
Version <= 6.18.*
Version 6.18.52
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.101
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/e422b32e6a57269ca8164c60674a78bee85cf5fb
https://git.kernel.org/stable/c/e5965ae3f7c918151b87e5c925b7978afbeaf638
https://git.kernel.org/stable/c/78d9daf5e13ad1448b7dfebac949936710ec7565
https://git.kernel.org/stable/c/95220e1f18f6321008f021abc7d6f581f64bcb82