In the Linux kernel, the following vulnerability has been resolved:
kthread: unpark only parked kthread
Calling into kthread unparking unconditionally is mostly harmless when the kthread is already unparked. The wake up is then simply ignored because the target is not in TASK_PARKED state.
However if the kthread is per CPU, the wake up is preceded by a call to kthread_bind() which expects the task to be inactive and in TASK_PARKED state, which obviously isn't the case if it is unparked.
As a result, calling kthread_stop() on an unparked per-cpu kthread triggers such a warning:
WARNING: CPU: 0 PID: 11 at kernel/kthread.c:525 __kthread_bind_mask kernel/kthread.c:525 <TASK> kthread_stop+0x17a/0x630 kernel/kthread.c:707 destroy_workqueue+0x136/0xc40 kernel/workqueue.c:5810 wg_destruct+0x1e2/0x2e0 drivers/net/wireguard/device.c:257 netdev_run_todo+0xe1a/0x1000 net/core/dev.c:10693 default_device_exit_batch+0xa14/0xa90 net/core/dev.c:11769 ops_exit_list net/core/net_namespace.c:178 [inline] cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK>
Fix this with skipping unecessary unparking while stopping a kthread.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-toolsUpgrade python-perfUpgrade bpftool-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-develUpgrade perfUpgrade kernel-debuginfo | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.115-126.197Upgrade perfUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-libbpfUpgrade kernelUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-devel | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Aug 13, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Jun 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Aug 13, 2025 | Jun 9, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-genericUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-20.04dUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-intelUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1073-awsUpgrade linux-image-6.8.0-1025-azureUpgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-kvmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatency-64k | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub