In the Linux kernel, the following vulnerability has been resolved:
workqueue: Put the pwq after detaching the rescuer from the pool
The commit 68f83057b913("workqueue: Reap workers via kthread_stop() and remove detach_completion") adds code to reap the normal workers but mistakenly does not handle the rescuer and also removes the code waiting for the rescuer in put_unbound_pool(), which caused a use-after-free bug reported by Cheung Wall.
To avoid the use-after-free bug, the pool’s reference must be held until the detachment is complete. Therefore, move the code that puts the pwq after detaching the rescuer from the pool.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-develUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-debugUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-debugUpgrade rtlaUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-64k-develUpgrade kernel-64kUpgrade kernel-rt-debug-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-docUpgrade kernel-rt-64k-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-develUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-coreUpgrade kernel-tools-libsUpgrade kernel-64k-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernelUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-uki-virt-addonsUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-64k-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade perfUpgrade kernel-rtUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64kUpgrade kernel-64k-debugUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade libperfUpgrade kernel-64k-debug-modules-core | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 9, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debug-coreUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade python3-perfUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-debug-devel-matchedUpgrade python3-perf-debuginfoUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade perfUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-uki-virtUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debugUpgrade libperfUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-modules-coreUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade perf-debuginfo | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade kernel-azure-vdsoUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-obs-qaUpgrade kernel-azure-develUpgrade kernel-64kb-develUpgrade kernel-64kb-extraUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-azure-extraUpgrade kernel-zfcpdump | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-gcp-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-oracleUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-awsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-azure-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-azureUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-kvmUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-virtualUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04cUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1035-awsUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-raspi-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-generic-64k-6.8 | May 21, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub