Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Back

CVE-2022-48944

sched: Fix yet more sched_fork() races

Medium5.5EPSS 0.21%
Published
Updated
Reserved
Assigned by
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: sched: Fix yet more sched_fork() races Where commit 4ef0c5c6b5ba ("kernel/sched: Fix sched_fork() access an invalid sched_task_group") fixed a fork race vs cgroup, it opened up a race vs syscalls by not placing the task on the runqueue before it gets exposed through the pidhash. Commit 13765de8148f ("sched/fair: Fix fault in reweight_entity") is trying to fix a single instance of this, instead fix the whole class of issues, effectively reverting this commit.

Scores

CVSS scores of CVE-2022-48944, by who scored it
Scored byCVSSScoreVector
NVDNVD · Analyzed3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.21% · top 89% of all CVEs (6 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Affected products

  • Linux · Linux

    • affected 3869eecf050416a1d19bac60926f6b5d64b0aa58 – < 3411613611a5cddf7e80908010dc87cb527dd13b
    • affected 4ef0c5c6b5ba1f38f0ea1cedad0cad722f00c14a – < c65cfd89cef669d90c59f3bf150af6458137a04f
    • affected 4ef0c5c6b5ba1f38f0ea1cedad0cad722f00c14a – < b1e8206582f9d680cff7d04828708c8b6ab32957
    • affected c85c6fadbef0a3eab41540ea628fa8fe8928c820
    • affected 25d40b828fb855ee62e1039c65a666c9afd60786
    • affected 5.15.3 – < 5.15.27
    • affected 5.10.80 – < 5.11
    • affected 5.14.19 – < 5.15

  • Linux · Linux

    • affected 5.16
    • unaffected < 5.16
    • unaffected 5.15.27 – ≤ 5.15.*
    • unaffected 5.16.13 – ≤ 5.16.*
    • unaffected 5.17 – ≤ *

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2022-48944 badge
[![CVE-2022-48944](https://trackcve.app/badge/CVE-2022-48944.svg)](https://trackcve.app/cve/CVE-2022-48944)

Record last updated .