CVE-2026-68334: rxrpc: fix io_thread race in rxrpc_wake_up_io_thread()
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: fix iothread race in rxrpcwakeupiothread()
rxrpcwakeupiothread() checks local->iothread before waking it, but then reloads the pointer for wakeupprocess().
local->iothread is cleared with WRITEONCE() when the I/O thread exits, so the second load can see NULL even if the first load did not.
Take a READONCE() snapshot and use it for both the NULL check and the wakeupprocess() call, as rxrpcencaprcv() already does.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68334?
CVE-2026-68334 has a risk rating of 12, indicating a high severity level.
What does CVE-2026-68334 affect?
CVE-2026-68334 affects the io_thread handling within the Linux kernel's RXRPC implementation.
How do I fix CVE-2026-68334?
To fix CVE-2026-68334, update your Linux kernel to the latest patched version that addresses this vulnerability.
What is the impact of CVE-2026-68334?
CVE-2026-68334 can lead to race conditions in the RXRPC io_thread, potentially causing instability in applications using this protocol.
When was CVE-2026-68334 published?
CVE-2026-68334 was published on August 10, 2026.