In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent process of the container is terminated.
This issue occurs because, under certain configurations, Docker does not properly propagate the mount replica back to the original mount point.
In this case, when the user driver detaches, the WQ is destroyed but it still calls destroy_workqueue() attempting to completes all pending work. It's necessary to check wq->wq and skip the drain if it no longer exists.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | Jul 28, 2025 | Jul 28, 2025 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Jul 25, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade python3-perfUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade rtlaUpgrade kernel-modules-extra-matchedUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-devel-matchedUpgrade python3-perf-debuginfoUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfo | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade dtb-apmUpgrade kernel-defaultUpgrade kernel-obs-qaUpgrade kernel-rt-livepatchUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-armUpgrade kernel-rtUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-default-base-rebuildUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade cluster-md-kmp-defaultUpgrade kernel-develUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade gfs2-kmp-64kbUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-docsUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade kernel-default-vdsoUpgrade dtb-nvidiaUpgrade kernel-azure-optionalUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-debug-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade dtb-marvellUpgrade dtb-amdUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-azure-develUpgrade cluster-md-kmp-azureUpgrade dtb-caviumUpgrade kernel-azureUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade kernel-64kbUpgrade dtb-lg | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-azure-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-ibmUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-awsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1014-azureUpgrade linux-image-lowlatency-6.8Upgrade linux-image-kvmUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-fipsUpgrade linux-image-oracle-6.14Upgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-6.8Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-aws-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-6.14Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-raspi-6.14Upgrade linux-image-gke-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-azure-6.14Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-22.04dUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-virtual-6.14Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-ibm-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-oracleUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oracle-64kUpgrade linux-image-xilinxUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oem-24.04cUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gcp-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidia-64k | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub