In the Linux kernel, the following vulnerability has been resolved:
kthread: unpark only parked kthread
Calling into kthread unparking unconditionally is mostly harmless when the kthread is already unparked. The wake up is then simply ignored because the target is not in TASK_PARKED state.
However if the kthread is per CPU, the wake up is preceded by a call to kthread_bind() which expects the task to be inactive and in TASK_PARKED state, which obviously isn't the case if it is unparked.
As a result, calling kthread_stop() on an unparked per-cpu kthread triggers such a warning:
WARNING: CPU: 0 PID: 11 at kernel/kthread.c:525 __kthread_bind_mask kernel/kthread.c:525 <TASK> kthread_stop+0x17a/0x630 kernel/kthread.c:707 destroy_workqueue+0x136/0xc40 kernel/workqueue.c:5810 wg_destruct+0x1e2/0x2e0 drivers/net/wireguard/device.c:257 netdev_run_todo+0xe1a/0x1000 net/core/dev.c:10693 default_device_exit_batch+0xa14/0xa90 net/core/dev.c:11769 ops_exit_list net/core/net_namespace.c:178 [inline] cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK>
Fix this with skipping unecessary unparking while stopping a kthread.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfo | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.115-126.197Upgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade kernel-tools | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Aug 13, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jun 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Aug 13, 2025 | Jun 9, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04dUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04bUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-1073-awsUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-127-genericUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-6.8.0-1025-azure | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub