CVE-2026-68334
Description
In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix io_thread race in rxrpc_wake_up_io_thread() rxrpc_wake_up_io_thread() checks local->io_thread before waking it, but then reloads the pointer for wake_up_process(). local->io_thread is cleared with WRITE_ONCE() when the I/O thread exits, so the second load can see NULL even if the first load did not. Take a READ_ONCE() snapshot and use it for both the NULL check and the wake_up_process() call, as rxrpc_encap_rcv() already does.
How to fix
- Linux Linuxc9165e199f56997f2f2deb5d3ec2dfab98dfa288, 092b42cf3f6013eec43607ecbcad674723649514, 745fb794c3e933c023af9dbb5876a5e16ad2dc71 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 5800b1cf3fd8ccab752a101865be1e76dac33142 ≤ v < c9165e199f56997f2f2deb5d3ec2dfab98dfa288, 5800b1cf3fd8ccab752a101865be1e76dac33142 ≤ v < 092b42cf3f6013eec43607ecbcad674723649514, 5800b1cf3fd8ccab752a101865be1e76dac33142 ≤ v < 745fb794c3e933c023af9dbb5876a5e16ad2dc71, 6.16 | c9165e199f56997f2f2deb5d3ec2dfab98dfa288, 092b42cf3f6013eec43607ecbcad674723649514, 745fb794c3e933c023af9dbb5876a5e16ad2dc71 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.