Threats tagged 'ghsa-q6ch-8cp2-xfhp'

CVE-2025-38369 is a high-severity vulnerability in the Linux kernel's dmaengine idxd driver. It involves improper checking of the availability of a workqueue allocated by the idxd wq driver before use. This flaw can cause a kernel panic or call trace when running IDXD workloads in containers with the /dev directory mounted, particularly when the container's parent process terminates. The issue arises due to Docker's improper propagation of mount replicas, leading to use-after-free conditions when the workqueue is destroyed but still referenced.