In the Linux kernel, the following vulnerability has been resolved:
schedext: Validate prevcpu in scxbpfselectcpudfl()
If a BPF scheduler provides an invalid CPU (outside the nrcpuids range) as prevcpu to scxbpfselectcpu_dfl() it can cause a kernel crash.
To prevent this, validate prevcpu in scxbpfselectcpu_dfl() and trigger an scx error if an invalid CPU is specified.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21965.json"
}