In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Cancel RTC work during ufshcd_remove()
Currently, RTC work is only cancelled during __ufshcd_wl_suspend(). When ufshcd is removed in ufshcd_remove(), RTC work is not cancelled. Due to this, any further trigger of the RTC work after ufshcd_remove() would result in a NULL pointer dereference as below:
Unable to handle kernel NULL pointer dereference at virtual address 00000000000002a4 Workqueue: events ufshcd_rtc_work Call trace: _raw_spin_lock_irqsave+0x34/0x8c pm_runtime_get_if_active+0x24/0xb4 ufshcd_rtc_work+0x124/0x19c process_scheduled_works+0x18c/0x2d8 worker_thread+0x144/0x280 kthread+0x11c/0x128 ret_from_fork+0x10/0x20
Since RTC work accesses the ufshcd internal structures, it should be cancelled when ufshcd is removed. So do that in ufshcd_remove(), as per the order in ufshcd_init().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 27, 2026 | Jul 27, 2026 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.11.0-1012-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-virtualUpgrade linux-image-6.11.0-1011-gcpUpgrade linux-image-6.11.0-1011-gcp-64kUpgrade linux-image-6.11.0-1010-raspiUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.11.0-1012-azureUpgrade linux-image-gcp-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1013-oracle-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.11.0-21-generic-64kUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-oracleUpgrade linux-image-raspi-realtimeUpgrade linux-image-realtimeUpgrade linux-image-aws-lts-24.04Upgrade linux-image-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-21-genericUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.11.0-1017-oemUpgrade linux-image-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-1011-awsUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1011-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1011-lowlatency-64kUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.8.0-1024-oracle-64kUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-azure-nvidiaUpgrade linux-image-generic-lpaeUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.11.0-1007-realtimeUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-6.11.0-1013-oracleUpgrade linux-image-6.8.0-1026-nvidia-lowlatency | Mar 28, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub