In the Linux kernel, the following vulnerability has been resolved:
kthread: unpark only parked kthread
Calling into kthread unparking unconditionally is mostly harmless when the kthread is already unparked. The wake up is then simply ignored because the target is not in TASK_PARKED state.
However if the kthread is per CPU, the wake up is preceded by a call to kthread_bind() which expects the task to be inactive and in TASK_PARKED state, which obviously isn't the case if it is unparked.
As a result, calling kthread_stop() on an unparked per-cpu kthread triggers such a warning:
WARNING: CPU: 0 PID: 11 at kernel/kthread.c:525 __kthread_bind_mask kernel/kthread.c:525 <TASK> kthread_stop+0x17a/0x630 kernel/kthread.c:707 destroy_workqueue+0x136/0xc40 kernel/workqueue.c:5810 wg_destruct+0x1e2/0x2e0 drivers/net/wireguard/device.c:257 netdev_run_todo+0xe1a/0x1000 net/core/dev.c:10693 default_device_exit_batch+0xa14/0xa90 net/core/dev.c:11769 ops_exit_list net/core/net_namespace.c:178 [inline] cleanup_net+0x89d/0xcc0 net/core/net_namespace.c:640 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 </TASK>
Fix this with skipping unecessary unparking while stopping a kthread.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.168-114.166Upgrade kernel-tools-develUpgrade kernel-develUpgrade perfUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-headers | Mar 14, 2025 | Oct 21, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-6.1.115-126.197Upgrade python3-perfUpgrade kernel-libbpf-develUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-static | Mar 27, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel | Aug 13, 2025 | Jun 9, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel-tools | Jun 11, 2025 | Oct 21, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Aug 13, 2025 | Jun 9, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-5.15.0-127-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1022-oracle-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-22.04Upgrade linux-image-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1071-intel-iotgUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.1-1018-realtimeUpgrade linux-image-gke-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oem-20.04bUpgrade linux-image-gkeop-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1078-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1022-oracleUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1039-xilinx-zynqmpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1068-nvidia-lowlatencyUpgrade linux-image-6.8.0-56-genericUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1024-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-6.8.0-1024-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-raspiUpgrade linux-image-intelUpgrade linux-image-5.15.0-1066-raspiUpgrade linux-image-5.15.0-1070-gkeUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.8.0-1024-nvidiaUpgrade linux-image-6.8.0-1026-gcpUpgrade linux-image-5.15.0-1068-nvidiaUpgrade linux-image-5.15.0-1071-oracleUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-5.15.0-127-lowlatency-64kUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-genericUpgrade linux-image-awsUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-oem-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-5.15.0-1073-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1066-ibmUpgrade linux-image-5.15.0-127-generic-64kUpgrade linux-image-6.8.0-1024-nvidia-lowlatencyUpgrade linux-image-5.15.0-1072-gcpUpgrade linux-image-6.8.0-56-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1070-kvmUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-5.15.0-127-lowlatencyUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-56-lowlatency-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1027-awsUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1026-gcp-64kUpgrade linux-image-6.8.0-1021-gkeUpgrade linux-image-5.15.0-127-genericUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-1056-gkeopUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1025-awsUpgrade linux-image-6.8.0-56-lowlatencyUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.8.0-1008-gkeopUpgrade linux-image-oracle-64kUpgrade linux-image-gke | Dec 18, 2024 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub