In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent process of the container is terminated.
This issue occurs because, under certain configurations, Docker does not properly propagate the mount replica back to the original mount point.
In this case, when the user driver detaches, the WQ is destroyed but it still calls destroy_workqueue() attempting to completes all pending work. It's necessary to check wq->wq and skip the drain if it no longer exists.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | Jul 28, 2025 | Jul 28, 2025 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Jul 25, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Rocky_linux | — | Upgrade rvUpgrade kernel-debuginfo-common-s390xUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade libperfUpgrade perfUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade libperf-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-debug-devel-matchedUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade python3-perfUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-debug-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade rtlaUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-uki-virtUpgrade kernel-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-modules-extra | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade kernel-sourceUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-develUpgrade dtb-amlogicUpgrade kernel-default-livepatchUpgrade dtb-appleUpgrade dtb-sprdUpgrade dtb-exynosUpgrade kernel-default-livepatch-develUpgrade kernel-rt_debugUpgrade dlm-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-default-develUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kernel-syms-rtUpgrade gfs2-kmp-azureUpgrade kernel-azureUpgrade dtb-renesasUpgrade dtb-caviumUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade dtb-freescaleUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-azure-extraUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade kernel-default-baseUpgrade kernel-rt-optionalUpgrade kernel-rt-vdsoUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dtb-qcomUpgrade kernel-macrosUpgrade dtb-xilinxUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade dtb-allwinnerUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-symsUpgrade kernel-default-extraUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade ocfs2-kmp-rtUpgrade kernel-rt-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-defaultUpgrade kernel-rtUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade dtb-hisiliconUpgrade kernel-develUpgrade kernel-default-optionalUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-kvmsmallUpgrade kernel-64kb-devel | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-azure-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-nvidiaUpgrade linux-image-raspi-realtimeUpgrade linux-image-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtualUpgrade linux-image-gcpUpgrade linux-image-oem-24.04bUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-6.14Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-azure-fips-6.8Upgrade linux-image-realtimeUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-azure-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-22.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-aws-6.8Upgrade linux-image-raspi-6.14Upgrade linux-image-ibmUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-6.14Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-fipsUpgrade linux-image-gke-64kUpgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-kvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-azure-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-gcp-fipsUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcp-fips | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub