-

CVE-2026-68334

rxrpc: fix io_thread race in rxrpc_wake_up_io_thread()

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: fix io_thread race in rxrpc_wake_up_io_thread()

rxrpc_wake_up_io_thread() checks local->io_thread before waking it, but
then reloads the pointer for wake_up_process().

local->io_thread is cleared with WRITE_ONCE() when the I/O thread exits, so
the second load can see NULL even if the first load did not.

Take a READ_ONCE() snapshot and use it for both the NULL check and the
wake_up_process() call, as rxrpc_encap_rcv() already does.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 5800b1cf3fd8ccab752a101865be1e76dac33142
Version < c9165e199f56997f2f2deb5d3ec2dfab98dfa288
Status affected
Version 5800b1cf3fd8ccab752a101865be1e76dac33142
Version < 092b42cf3f6013eec43607ecbcad674723649514
Status affected
Version 5800b1cf3fd8ccab752a101865be1e76dac33142
Version < 745fb794c3e933c023af9dbb5876a5e16ad2dc71
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.16
Status affected
Version 0
Version < 6.16
Status unaffected
Version <= 6.18.*
Version 6.18.42
Status unaffected
Version <= 7.1.*
Version 7.1.6
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.07
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/c9165e199f56997f2f2deb5d3ec2dfab98dfa288
https://git.kernel.org/stable/c/092b42cf3f6013eec43607ecbcad674723649514
https://git.kernel.org/stable/c/745fb794c3e933c023af9dbb5876a5e16ad2dc71