CVE-2022-48944

sched: Fix yet more sched_fork() races

State: Published
Severity: Not scored
Published: Aug 30, 2024
Updated: May 23, 2026
Reserved: Aug 22, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

sched: Fix yet more sched_fork() races

Where commit 4ef0c5c6b5ba ("kernel/sched: Fix sched_fork() access an invalid sched_task_group") fixed a fork race vs cgroup, it opened up a race vs syscalls by not placing the task on the runqueue before it gets exposed through the pidhash.

Commit 13765de8148f ("sched/fair: Fix fault in reweight_entity") is trying to fix a single instance of this, instead fix the whole class of issues, effectively reverting this commit.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	3869eecf050416a1d19bac60926f6b5d64b0aa58 to before 3411613611a5cddf7e80908010dc87cb527dd13bAffected 4ef0c5c6b5ba1f38f0ea1cedad0cad722f00c14a to before c65cfd89cef669d90c59f3bf150af6458137a04fAffected 4ef0c5c6b5ba1f38f0ea1cedad0cad722f00c14a to before b1e8206582f9d680cff7d04828708c8b6ab32957Affected c85c6fadbef0a3eab41540ea628fa8fe8928c820Affected 25d40b828fb855ee62e1039c65a666c9afd60786Affected 5.15.3 to before 5.15.27Affected 5.10.80 to before 5.11Affected 5.14.19 to before 5.15Affected
LinuxLinux	5.16Affected before 5.16Not affected 5.15.27 through 5.15.Not affected 5.16.13 through 5.16.Not affected 5.17 and laterNot affected

Product

Versions

LinuxLinux

3869eecf050416a1d19bac60926f6b5d64b0aa58 to before 3411613611a5cddf7e80908010dc87cb527dd13bAffected
4ef0c5c6b5ba1f38f0ea1cedad0cad722f00c14a to before c65cfd89cef669d90c59f3bf150af6458137a04fAffected
4ef0c5c6b5ba1f38f0ea1cedad0cad722f00c14a to before b1e8206582f9d680cff7d04828708c8b6ab32957Affected
c85c6fadbef0a3eab41540ea628fa8fe8928c820Affected
25d40b828fb855ee62e1039c65a666c9afd60786Affected
5.15.3 to before 5.15.27Affected
5.10.80 to before 5.11Affected
5.14.19 to before 5.15Affected

LinuxLinux

5.16Affected
before 5.16Not affected
5.15.27 through 5.15.*Not affected
5.16.13 through 5.16.*Not affected
5.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.