In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent process of the container is terminated.
This issue occurs because, under certain configurations, Docker does not properly propagate the mount replica back to the original mount point.
In this case, when the user driver detaches, the WQ is destroyed but it still calls destroy_workqueue() attempting to completes all pending work. It's necessary to check wq->wq and skip the drain if it no longer exists.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | Jul 28, 2025 | Jul 28, 2025 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Jul 25, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 31, 2025 | Jul 25, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debug-develUpgrade kernel-uki-virtUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debugUpgrade python3-perfUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-modules-extra-matchedUpgrade rtlaUpgrade kernel-debug-uki-virtUpgrade kernel-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-develUpgrade python3-perf-debuginfoUpgrade kernel-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-modules-coreUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade libperfUpgrade kernel-zfcpdump-modulesUpgrade perfUpgrade kernel-devel-matchedUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modules-extraUpgrade rvUpgrade kernel-uki-virt-addonsUpgrade perf-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-zfcpdump-debuginfo | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade gfs2-kmp-rtUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-rt-livepatchUpgrade dlm-kmp-rtUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-macrosUpgrade cluster-md-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade ocfs2-kmp-rtUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-default-optionalUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade dtb-amdUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-devel-azureUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-azureUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade kernel-rt_debug-vdsoUpgrade dtb-renesasUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade dtb-appleUpgrade dtb-amlogicUpgrade kernel-debug-develUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-64kb-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-devel | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-generic-6.14Upgrade linux-image-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-gke-64kUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-oem-6.14Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-realtime-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-aws-6.14Upgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-azureUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-awsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-generic-lpaeUpgrade linux-image-ibmUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-aws-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oem-24.04bUpgrade linux-image-oem-24.04cUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidiaUpgrade linux-image-oracleUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-xilinxUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-virtual-6.14Upgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-azure-6.8 | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub