CVE-2025-39780— sched/ext: Fix invalid task state transitions on class switch
Affected Version Matrix 8
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | a8532fac7b5d27b8d62008a89593dccb6f9786ef< 786f6314604b34c3e7de5f733f4e08e35c448a50 | affected |
a8532fac7b5d27b8d62008a89593dccb6f9786ef< 6a32cbe95029ebe21cc08349fd7ef2a3d32d2043 | affected | ||
a8532fac7b5d27b8d62008a89593dccb6f9786ef< ddf7233fcab6c247379d0928d46cc316ee122229 | affected | ||
6.12 | affected | ||
< 6.12 | unaffected | ||
6.12.44≤ 6.12.* | unaffected | ||
6.16.4≤ 6.16.* | unaffected | ||
6.17≤ * | unaffected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-39780
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
sched/ext: Fix invalid task state transitions on class switch
Source: NVD (National Vulnerability Database)
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: sched/ext: Fix invalid task state transitions on class switch When enabling a sched_ext scheduler, we may trigger invalid task state transitions, resulting in warnings like the following (which can be easily reproduced by running the hotplug selftest in a loop): sched_ext: Invalid task state transition 0 -> 3 for fish[770] WARNING: CPU: 18 PID: 787 at kernel/sched/ext.c:3862 scx_set_task_state+0x7c/0xc0 ... RIP: 0010:scx_set_task_state+0x7c/0xc0 ... Call Trace: <TASK> scx_enable_task+0x11f/0x2e0 switching_to_scx+0x24/0x110 scx_enable.isra.0+0xd14/0x13d0 bpf_struct_ops_link_create+0x136/0x1a0 __sys_bpf+0x1edd/0x2c30 __x64_sys_bpf+0x21/0x30 do_syscall_64+0xbb/0x370 entry_SYSCALL_64_after_hwframe+0x77/0x7f This happens because we skip initialization for tasks that are already dead (with their usage counter set to zero), but we don't exclude them during the scheduling class transition phase. Fix this by also skipping dead tasks during class swiching, preventing invalid task state transitions.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel存在安全漏洞，该漏洞源于调度类转换阶段未排除已终止任务，可能导致无效任务状态转换。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-39780
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-39780
请登录查看更多情报信息。
Same Patch Batch · Linux · 2025-09-11 · 54 CVEs total
| CVE-2025-39773 | net: bridge: fix soft lockup in br_multicast_query_expired() | |
| CVE-2025-39791 | dm: dm-crypt: Do not partially accept write BIOs with zoned targets | |
| CVE-2025-39785 | drm/hisilicon/hibmc: fix irq_request()'s irq name variable is local | |
| CVE-2025-39788 | scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE | |
| CVE-2025-39787 | soc: qcom: mdt_loader: Ensure we don't read past the ELF header | |
| CVE-2025-39786 | iio: adc: ad7173: fix channels index for syscalib_mode | |
| CVE-2025-39789 | crypto: x86/aegis - Add missing error checks | |
| CVE-2025-39776 | mm/debug_vm_pgtable: clear page table entries at destroy_args() | |
| CVE-2025-39775 | mm/mremap: fix WARN with uffd that has remap events disabled | |
| CVE-2025-39774 | iio: adc: rzg2l_adc: Set driver data before enabling runtime PM | |
| CVE-2025-39777 | crypto: acomp - Fix CFI failure due to type punning | |
| CVE-2025-39772 | drm/hisilicon/hibmc: fix the hibmc loaded failed bug | |
| CVE-2025-39771 | regulator: pca9450: Use devm_register_sys_off_handler | |
| CVE-2025-39770 | net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM | |
| CVE-2025-39769 | bnxt_en: Fix lockdep warning during rmmod | |
| CVE-2025-39768 | net/mlx5: HWS, fix complex rules rehash error flow | |
| CVE-2025-39766 | net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit | |
| CVE-2025-39767 | LoongArch: Optimize module load time by optimizing PLT/GOT counting | |
| CVE-2025-39765 | ALSA: timer: fix ida_free call while not allocated | |
| CVE-2025-39764 | netfilter: ctnetlink: remove refcounting in expectation dumpers |
Showing top 20 of 54 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2025-39780
No comments yet