In the Linux kernel, the following vulnerability has been resolved:
crypto: qat - flush misc workqueue during device shutdown
Repeated loading and unloading of a device specific QAT driver, for example qat_4xxx, in a tight loop can lead to a crash due to a use-after-free scenario. This occurs when a power management (PM) interrupt triggers just before the device-specific driver (e.g., qat_4xxx.ko) is unloaded, while the core driver (intel_qat.ko) remains loaded.
Since the driver uses a shared workqueue (`qat_misc_wq`) across all devices and owned by intel_qat.ko, a deferred routine from the device-specific driver may still be pending in the queue. If this routine executes after the driver is unloaded, it can dereference freed memory, resulting in a page fault and kernel crash like the following:
BUG: unable to handle page fault for address: ffa000002e50a01c #PF: supervisor read access in kernel mode RIP: 0010:pm_bh_handler+0x1d2/0x250 [intel_qat] Call Trace: pm_bh_handler+0x1d2/0x250 [intel_qat] process_one_work+0x171/0x340 worker_thread+0x277/0x3a0 kthread+0xf0/0x120 ret_from_fork+0x2d/0x50
To prevent this, flush the misc workqueue during device shutdown to ensure that all pending work items are completed before the driver is unloaded.
Note: This approach may slightly increase shutdown latency if the workqueue contains jobs from other devices, but it ensures correctness and stability.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 11, 2026 | Feb 11, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Sep 5, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 5, 2025 |
| Suse | — | Upgrade dtb-exynosUpgrade kernel-azure-vdsoUpgrade dtb-apmUpgrade kernel-debug-develUpgrade dtb-lgUpgrade gfs2-kmp-rtUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-default-develUpgrade kernel-rt_debugUpgrade dtb-amlogicUpgrade kernel-source-azureUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade kernel-64kbUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-debugUpgrade kernel-default-livepatchUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-develUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-socionextUpgrade dtb-alteraUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade dtb-marvellUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade kernel-macrosUpgrade ocfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-allwinnerUpgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade dtb-renesasUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-vdsoUpgrade gfs2-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-baseUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade dtb-armUpgrade kernel-debug-vdsoUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade reiserfs-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-mediatekUpgrade kernel-default-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-rtUpgrade kernel-64kb-extraUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade kernel-default-optionalUpgrade kernel-defaultUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade dtb-sprdUpgrade kselftests-kmp-rtUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-default | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-xilinx-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-64k-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-azure-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gcp-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-azure-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtualUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-awsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-xilinxUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1046-nvidia | Feb 12, 2026 | Sep 5, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Sep 5, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub