In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
Running IDXD workloads in a container with the /dev directory mounted can trigger a call trace or even a kernel panic when the parent process of the container is terminated.
This issue occurs because, under certain configurations, Docker does not properly propagate the mount replica back to the original mount point.
In this case, when the user driver detaches, the WQ is destroyed but it still calls destroy_workqueue() attempting to completes all pending work. It's necessary to check wq->wq and skip the drain if it no longer exists.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxNo solution exists | Jul 28, 2025 | Jul 28, 2025 |
| Oracle_linux | — | Upgrade kernel | Dec 3, 2025 | Jul 25, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-develUpgrade kernel-debug-uki-virtUpgrade kernel-debuginfoUpgrade kernel-rt-develUpgrade rtlaUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-modules-extra-matchedUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-coreUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdumpUpgrade kernel-rt-debug-develUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-uki-virtUpgrade kernel-tools-libsUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfo-common-s390xUpgrade rvUpgrade perfUpgrade kernel-rt-modules-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-debuginfoUpgrade libperf-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-modules-coreUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade libperfUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-toolsUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-devel-matchedUpgrade kernelUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-extra | Feb 5, 2026 | Nov 27, 2025 |
| Suse | — | Upgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade dlm-kmp-rtUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade kernel-symsUpgrade ocfs2-kmp-rtUpgrade dtb-hisiliconUpgrade cluster-md-kmp-rtUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dlm-kmp-azureUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade dtb-rockchipUpgrade dtb-apmUpgrade kernel-rtUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-armUpgrade cluster-md-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-docsUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-socionextUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade kernel-azureUpgrade dtb-sprdUpgrade kernel-rt_debugUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-lgUpgrade dlm-kmp-defaultUpgrade kernel-rt-extraUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade kernel-sourceUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-vdsoUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kernel-source-rtUpgrade kernel-azure-optionalUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade dtb-amdUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade dtb-apple | Dec 5, 2025 | Aug 18, 2025 |
| Ubuntu | — | Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-xilinxUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-oem-24.04cUpgrade linux-image-gcp-6.14Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64k-6.14Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-gcpUpgrade linux-image-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-oracle-6.8Upgrade linux-image-kvmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.14Upgrade linux-image-aws-fips-6.8Upgrade linux-image-oracle-6.14Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-raspi-6.14Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-virtual-6.8Upgrade linux-image-azureUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-ibmUpgrade linux-image-azure-6.14Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-realtime-6.8.1Upgrade linux-image-raspi-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-gcp-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-awsUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oem-6.14Upgrade linux-image-fipsUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gke-64kUpgrade linux-image-generic-6.14Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-raspiUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-6.14Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1043-gke-64k | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub