Information Exposure Affecting torvalds/linux package, versions [7.1,7.2.13)

Affected versions of this package are vulnerable to Information Exposure in the scx_bypass process. An attacker can cause unintended information disclosure by manipulating scheduler bypass claims and depth propagation, potentially leading to exposure of sensitive scheduling state or task information.

Note: The Linux kernel project assigns a CVE to every bug fix it ships, whether or not the bug has been shown to be exploitable. This advisory was generated from that process and has not been individually assessed for exploitability. See the kernel's CVE process documentation: https://github.com/torvalds/linux/blob/master/Documentation/process/cve.rst

• GitHub Commit
• GitHub Commit