In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent process of the container is terminated.
This issue occurs because, under certain configurations, Docker does not properly propagate the mount replica back to the original mount point.
In this case, when the user driver detaches, the WQ is destroyed but it still calls destroy_workqueue() attempting to completes all pending work. It's necessary to check wq->wq and skip the drain if it no longer exists.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 28, 2025 | Jul 28, 2025 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Jul 25, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfoUpgrade kernel-debug-devel-matchedUpgrade perf-debuginfoUpgrade rvUpgrade kernel-rt-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virt-addonsUpgrade libperf-debuginfoUpgrade kernelUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-coreUpgrade libperfUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rtUpgrade perfUpgrade kernel-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade python3-perfUpgrade kernel-develUpgrade kernel-modules-extra-matchedUpgrade kernel-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade kernel-kvmsmallUpgrade kselftests-kmp-defaultUpgrade dlm-kmp-rtUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade kernel-syms-azureUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-develUpgrade reiserfs-kmp-azureUpgrade kernel-symsUpgrade dtb-armUpgrade kernel-macrosUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade kernel-default-base-rebuildUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-default-vdsoUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade dtb-qcomUpgrade kernel-rt-livepatchUpgrade kernel-debugUpgrade kernel-defaultUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-rt-develUpgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade dtb-exynosUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-appleUpgrade dtb-lgUpgrade kernel-rt_debugUpgrade dtb-sprdUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-develUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade kselftests-kmp-64kbUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-azureUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-alteraUpgrade dtb-amazonUpgrade kernel-devel-azure | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-22.04cUpgrade linux-image-azure-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-ibm-6.8Upgrade linux-image-gcp-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-aws-64kUpgrade linux-image-oem-24.04cUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidiaUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gkeopUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-intel-iotgUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-gkeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-genericUpgrade linux-image-xilinxUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-generic-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-6.8Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-xilinx-6.8Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-realtime-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-awsUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-raspi-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-fipsUpgrade linux-image-oracle-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-ibmUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-azure-nvidia-6.14 | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub