CVE-2025-38369

dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using

published July 25, 2025

CVSS
—
EPSS
0%
Percentile
6.6
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using

Running IDXD workloads in a container with the /dev directory mounted can

trigger a call trace or even a kernel panic when the parent process of the

container is terminated.

This issue occurs because, under certain configurations, Docker does not

properly propagate the mount replica back to the original mount point.

In this case, when the user driver detaches, the WQ is destroyed but it

still calls destroy_workqueue() attempting to completes all pending work.

It's necessary to check wq->wq and skip the drain if it no longer exists.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00174 · 6.6th percentile
Published
2025-07-25T12:47Z
EPSS history
Timeline
  • 25 JUL 12:47Z
    dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
    cvelistv5