Riskcovery

CVE-2026-68334

rxrpc: fix io_thread race in rxrpc_wake_up_io_thread()

State
Published
Severity
Not scored
Published
Aug 10, 2026
Updated
Aug 17, 2026
Reserved
Jul 30, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

rxrpc: fix io_thread race in rxrpc_wake_up_io_thread()

rxrpc_wake_up_io_thread() checks local->io_thread before waking it, but then reloads the pointer for wake_up_process().

local->io_thread is cleared with WRITE_ONCE() when the I/O thread exits, so the second load can see NULL even if the first load did not.

Take a READ_ONCE() snapshot and use it for both the NULL check and the wake_up_process() call, as rxrpc_encap_rcv() already does.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 5800b1cf3fd8ccab752a101865be1e76dac33142 to before c9165e199f56997f2f2deb5d3ec2dfab98dfa288Affected
  • 5800b1cf3fd8ccab752a101865be1e76dac33142 to before 092b42cf3f6013eec43607ecbcad674723649514Affected
  • 5800b1cf3fd8ccab752a101865be1e76dac33142 to before 745fb794c3e933c023af9dbb5876a5e16ad2dc71Affected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.42 through 6.18.*Not affected
  • 7.1.6 through 7.1.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.