In the Linux kernel, the following vulnerability has been resolved:
workqueue: Put the pwq after detaching the rescuer from the pool
The commit 68f83057b913("workqueue: Reap workers via kthread_stop() and remove detach_completion") adds code to reap the normal workers but mistakenly does not handle the rescuer and also removes the code waiting for the rescuer in put_unbound_pool(), which caused a use-after-free bug reported by Cheung Wall.
To avoid the use-after-free bug, the pool’s reference must be held until the detachment is complete. Therefore, move the code that puts the pwq after detaching the rescuer from the pool.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-cross-headersUpgrade rvUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-64k-modules-extraUpgrade kernel-uki-virt-addonsUpgrade python3-perfUpgrade kernel-64k-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64kUpgrade kernel-64k-debugUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernel-rtUpgrade libperfUpgrade kernel-64k-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virtUpgrade kernel-debugUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-develUpgrade kernel-rt-64k-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade rtlaUpgrade kernel-64kUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-64k-modulesUpgrade kernel-debug-coreUpgrade kernel-64k-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-coreUpgrade kernel-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-64k-devel | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 27, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 9, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade kernel-devel-matchedUpgrade kernel-toolsUpgrade kernel-zfcpdumpUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-develUpgrade libperfUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade libperf-debuginfoUpgrade perf-debuginfoUpgrade perfUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-modules-extra-matchedUpgrade kernel-modules-coreUpgrade python3-perfUpgrade kernel-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade rtlaUpgrade kernel-rt-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-core | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade kernel-kvmsmall-develUpgrade kernel-sourceUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade kernel-azure-extraUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-azureUpgrade kernel-azure-vdsoUpgrade kernel-default-extraUpgrade kernel-64kb-extraUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-64kb-develUpgrade kernel-azure-develUpgrade kernel-obs-qaUpgrade kernel-docs | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-genericUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gkeopUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.8.0-78-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-azure-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-raspi-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-virtualUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azureUpgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-awsUpgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-aws-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibm-lts-24.04 | May 21, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub