https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 05:34:18 +0000 https://vulnerability.circl.lu/vuln/cve-2025-21786 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>workqueue: Put the pwq after detaching the rescuer from the pool</p> <p>The commit 68f83057b913(&#34;workqueue: Reap workers via kthread_stop() and remove detach_completion&#34;) adds code to reap the normal workers but mistakenly does not handle the rescuer and also removes the code waiting for the rescuer in put_unbound_pool(), which caused a use-after-free bug reported by Cheung Wall.</p> <p>To avoid the use-after-free bug, the pool’s reference must be held until the detachment is complete. Therefore, move the code that puts the pwq after detaching the rescuer from the pool.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>workqueue: Put the pwq after detaching the rescuer from the pool</p> <p>The commit 68f83057b913(&#34;workqueue: Reap workers via kthread_stop() and remove detach_completion&#34;) adds code to reap the normal workers but mistakenly does not handle the rescuer and also removes the code waiting for the rescuer in put_unbound_pool(), which caused a use-after-free bug reported by Cheung Wall.</p> <p>To avoid the use-after-free bug, the pool’s reference must be held until the detachment is complete. Therefore, move the code that puts the pwq after detaching the rescuer from the pool.</p> https://vulnerability.circl.lu/vuln/cve-2025-21786