CVE-2024-49573: sched/fair: Fix NEXT_BUDDY

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-01-11 · updated 2026-08-04

Description

In the Linux kernel, the following vulnerability has been resolved: sched/fair: Fix NEXT_BUDDY Adam reports that enabling NEXT_BUDDY insta triggers a WARN in pick_next_entity(). Moving clear_buddies() up before the delayed dequeue bits ensures no ->next buddy becomes delayed. Further ensure no new ->next buddy ever starts as delayed.

Affected products

Linux kernel: from 6.12 before 6.12.7; 6.13-rc1, 6.13-rc2 — fixed in 6.12.7

How to fix

Upgrade to a fixed version: Linux kernel 6.12.7. Check the vendor advisory for mitigations.

References

https://git.kernel.org/stable/c/493afbd187c4c9cc1642792c0d9ba400c3d6d90d
https://git.kernel.org/stable/c/5dbe6816c49197677a5ecce749bd99929da147da

Get alerted when CVE-2024-49573 or the next vulnerability affects your stack