In the Linux kernel, the following vulnerability has been resolved:
workqueue: Put the pwq after detaching the rescuer from the pool
The commit 68f83057b913("workqueue: Reap workers via kthread_stop() and remove detach_completion") adds code to reap the normal workers but mistakenly does not handle the rescuer and also removes the code waiting for the rescuer in put_unbound_pool(), which caused a use-after-free bug reported by Cheung Wall.
To avoid the use-after-free bug, the pool’s reference must be held until the detachment is complete. Therefore, move the code that puts the pwq after detaching the rescuer from the pool.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-rt-64k-modules-extraUpgrade kernelUpgrade kernel-rt-64k-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-modulesUpgrade rvUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-rtUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debugUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade rtlaUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-64k-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-develUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade kernel-debug-modulesUpgrade kernel-64kUpgrade kernel-rt-64k-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-debug-core | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Feb 27, 2025 |
| Rocky_linux | — | Upgrade libperfUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-modules-coreUpgrade libperf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-modulesUpgrade rvUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-debuginfoUpgrade kernel-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade python3-perfUpgrade kernel-modules-extra-matchedUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-debuginfo | Feb 5, 2026 | Nov 21, 2025 |
| Suse | — | Upgrade kernel-default-vdsoUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmallUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade kernel-64kbUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-devel | Dec 5, 2025 | Dec 5, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1035-nvidia-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1035-aws-64kUpgrade linux-image-6.8.0-1035-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.8.0-1032-oracle-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-gkeUpgrade linux-image-gkeopUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-78-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-78-genericUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1036-gcp-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1032-gkeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracleUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.8.0-1035-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1035-nvidiaUpgrade linux-image-6.8.0-1032-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1036-gcpUpgrade linux-image-6.8.0-1019-gkeopUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.1-1030-realtimeUpgrade linux-image-6.8.0-1035-awsUpgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.8.0-78-lowlatency-64kUpgrade linux-image-aws-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-6.8.0-1035-nvidia-lowlatencyUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.8.0-78-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-raspi-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-ibm-classicUpgrade linux-image-azure-nvidiaUpgrade linux-image-aws-64k-6.8Upgrade linux-image-awsUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-aws-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1033-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-2028-raspi-realtimeUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-oracle-64k | May 21, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub