SB20250227172 - Resource management error in Linux kernel sched

Description

This security bulletin contains information about 1 security vulnerability.

1) Resource management error (CVE-ID: CVE-2025-21771)

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to resource management error within the ops_sanitize_err() function in kernel/sched/ext.c, within the sched_change_group(), sched_move_task() and cpu_cgroup_attach() functions in kernel/sched/core.c, within the sched_autogroup_exit_task() and autogroup_move_group() functions in kernel/sched/autogroup.c. A local user can perform a denial of service (DoS) attack.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/75bf2f80c046d2ec5a07455891ea0a9fb6d8b5f6
• https://git.kernel.org/stable/c/d6f3e7d564b2309e1f17e709a70eca78d7ca2bb8
• https://git.kernel.org/stable/c/d8b510d0ddc65d8a71e0f9a3acc9ed5f010fc514
• https://mirrors.edge.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.13.4