In the Linux kernel, the following vulnerability has been resolved:
kthread: unpark only parked kthread
Calling into kthread unparking unconditionally is mostly harmless when the kthread is already unparked. The wake up is then simply ignored because the target is not in TASK_PARKED state.
However if the kthread is per CPU, the wake up is preceded by a call to kthread_bind() which expects the task to be inactive and in TASK_PARKED state, which obviously isn't the case if it is unparked.
As a result, calling kthread_stop() on an unparked per-cpu kthread triggers such a warning:
WARNING: CPU: 0 PID: 11 at kernel/kthread.c:525 __kthread_bind_mask kernel/kthread.c:525 <TASK> kthread_stop+0x17a/0x630 kernel/kthread.c:707 destroy_workqueue+0x136/0xc40 kernel/workqueue.c:5810 wg_destruct+0x1e2/0x2e0 drivers/net/wireguard/device.c:257 netdev_run_todo+0xe1a/0x1000 net/core/dev.c:10693 default_device_exit_batch+0xa14/0xa90 net/core/dev.c:11769 ops_exit_list net/core/net_namespace.c:178 [inline] cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK>
Fix this with skipping unecessary unparking while stopping a kthread.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.168-114.166 | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-6.1.115-126.197Upgrade perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools-devel | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Aug 13, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Jun 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Aug 13, 2025 | Jun 9, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1073-awsUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-oracleUpgrade linux-image-gcp-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-6.11.0-1009-azureUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-gcpUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-azureUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-intelUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-oem-20.04cUpgrade linux-image-genericUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-20.04bUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-kvm | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub