In the Linux kernel, the following vulnerability has been resolved:
workqueue: Put the pwq after detaching the rescuer from the pool
The commit 68f83057b913("workqueue: Reap workers via kthread_stop() and remove detach_completion") adds code to reap the normal workers but mistakenly does not handle the rescuer and also removes the code waiting for the rescuer in put_unbound_pool(), which caused a use-after-free bug reported by Cheung Wall.
To avoid the use-after-free bug, the pool’s reference must be held until the detachment is complete. Therefore, move the code that puts the pwq after detaching the rescuer from the pool.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernelUpgrade kernel-rt-64kUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-debug-coreUpgrade python3-perfUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rtUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-headersUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debugUpgrade kernel-modules-coreUpgrade libperfUpgrade perfUpgrade kernel-toolsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-devel-matchedUpgrade rvUpgrade kernel-64k-debug-coreUpgrade rtlaUpgrade kernel-rt-debug-modules-coreUpgrade kernel-docUpgrade kernel-debug-modulesUpgrade kernel-64kUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debugUpgrade kernel-develUpgrade kernel-64k-debug-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debugUpgrade kernel-rt-64k-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-tools-libsUpgrade kernel-64k-coreUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-core | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 9, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade python3-perf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-develUpgrade kernel-uki-virt-addonsUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade rvUpgrade kernel-develUpgrade perfUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade libperf | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-64kb-develUpgrade kernel-develUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-sourceUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azure | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-78-genericUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-raspi-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1035-awsUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-oem-22.04cUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-azureUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-aws-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-64k-6.8 | May 21, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub