In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent process of the container is terminated.
This issue occurs because, under certain configurations, Docker does not properly propagate the mount replica back to the original mount point.
In this case, when the user driver detaches, the WQ is destroyed but it still calls destroy_workqueue() attempting to completes all pending work. It's necessary to check wq->wq and skip the drain if it no longer exists.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution existsUpgrade linux | Jul 28, 2025 | Jul 28, 2025 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Jul 25, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 31, 2025 | Jul 25, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-debug-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernelUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rtUpgrade kernel-zfcpdump-coreUpgrade libperfUpgrade kernel-debuginfo-common-s390xUpgrade kernel-toolsUpgrade perfUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade rtlaUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modulesUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-debugUpgrade kernel-debug-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-core | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade kernel-macrosUpgrade kernel-symsUpgrade dtb-armUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade kernel-obs-qaUpgrade dtb-hisiliconUpgrade ocfs2-kmp-rtUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-rt-optionalUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade dtb-lgUpgrade dtb-alteraUpgrade dtb-socionextUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade kernel-devel-azureUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade kernel-azureUpgrade kernel-64kbUpgrade dlm-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-rt_debug-develUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-azure-develUpgrade dtb-marvell | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-xilinxUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oracle-64kUpgrade linux-image-aws-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-6.14Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-virtual-6.14Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-oracleUpgrade linux-image-gke-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-classicUpgrade linux-image-gke-64kUpgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-raspiUpgrade linux-image-ibmUpgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-azure-6.14Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-awsUpgrade linux-image-oem-6.14Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-64kUpgrade linux-image-azureUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-fipsUpgrade linux-image-oracle-64k-6.14 | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub