CVE-2026-99058
Received
Received - Intake
Workqueue NULL Dereference in Linux Kernel
Vulnerability report for CVE-2026-99058, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-23
Last updated on: 2026-10-23
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
workqueue: Fix NULL current_pwq deref in chained work check
current_wq_worker() only tells us that %current is a kworker. It does
not guarantee that the worker is currently executing a work item, as
worker->current_pwq is populated only while process_one_work() is running
the work function.
is_chained_work() can be reached while queueing on a draining or
destroying workqueue. If a kworker outside work-item execution reaches
that path, current_wq_worker() returns a worker but worker->current_pwq is
NULL, and the chained-work test can fault before it emits the intended
warning.
Guard the chained-work test with worker->current_pwq. A kworker without
current_pwq is not executing work on the target workqueue, so the helper
should return false and let the draining/destroying warning fire.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 8d03ecfe471802d6afe97da97722b6924533aa82 |
| Linux | Linux | 8d03ecfe471802d6afe97da97722b6924533aa82 |
| Linux | Linux | 8d03ecfe471802d6afe97da97722b6924533aa82 |
| Linux | Linux | 8d03ecfe471802d6afe97da97722b6924533aa82 |
| Linux | Linux | 8d03ecfe471802d6afe97da97722b6924533aa82 |
| Linux | Linux | 3.9 |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
