Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-64211— srcu: Don't queue workqueue handlers to never-online CPUs

AI Predicted 3.3 Difficulty: Moderate EPSS 0.15% · P5

Possible ATT&CK Techniques 1AI

T1059 · Command and Scripting Interpreter

Affected Version Matrix 6

VendorProductVersion RangeStatus
LinuxLinux61bbcfb50514a8a94e035a7349697a3790ab4783< a4153538fcd2361c4e0039eb103265492d26044eaffected
61bbcfb50514a8a94e035a7349697a3790ab4783< 593889c401426004bd0ea0f6d4fcece728b03420affected
7.0affected
< 7.0unaffected
7.0.11≤ 7.0.*unaffected
7.1≤ *unaffected
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-64211

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
srcu: Don't queue workqueue handlers to never-online CPUs
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: srcu: Don't queue workqueue handlers to never-online CPUs While an srcu_struct structure is in the midst of switching from CPU-0 to all-CPUs state, it can attempt to invoke callbacks for CPUs that have never been online. Worse yet, it can attempt in invoke callbacks for CPUs that never will be online, even including imaginary CPUs not in cpu_possible_mask. This can cause hangs on s390, which is not set up to deal with workqueue handlers being scheduled on such CPUs. This commit therefore causes Tree SRCU to refrain from queueing workqueue handlers on CPUs that have not yet (and might never) come online. Because callbacks are not invoked on CPUs that have not been online, it is an error to invoke call_srcu(), synchronize_srcu(), or synchronize_srcu_expedited() on a CPU that is not yet fully online. However, it turns out to be less code to redirect the callbacks from too-early invocations of call_srcu() than to warn about such invocations. This commit therefore also redirects callbacks queued on not-yet-fully-online CPUs to the boot CPU.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 61bbcfb50514a8a94e035a7349697a3790ab4783 ~ a4153538fcd2361c4e0039eb103265492d26044e -
LinuxLinux 7.0 -

II. Public POCs for CVE-2026-64211

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-64211

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-64211 (2)

Same Patch Batch · Linux · 2026-07-24 · 48 CVEs total

CVE-2026-64222octeontx2-pf: avoid double free of pool->stack on AQ init failure
CVE-2026-64218batman-adv: bla: fix report_work leak on backbone_gw purge
CVE-2026-64216netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages()
CVE-2026-64213hwmon: (lm90) Add lock protection to lm90_alert
CVE-2026-64212wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it
CVE-2026-64210net/mlx5e: xsk: Fix unlocked writing to ICOSQ
CVE-2026-64209phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config
CVE-2026-64208crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks
CVE-2026-64215drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table
CVE-2026-64221spi: ti-qspi: fix use-after-free after DMA setup failure
CVE-2026-64220device property: set fwnode->secondary to NULL in fwnode_init()
CVE-2026-64223wifi: mac80211: consume only present negotiated TTLM maps
CVE-2026-64224octeontx2-pf: fix double free in rvu_rep_rsrc_init()
CVE-2026-64225octeontx2-af: CGX: add bounds check to cgx_speed_mbps index
CVE-2026-64226sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path
CVE-2026-64227ACPI: driver: Check ACPI_COMPANION() against NULL during probe
CVE-2026-64229x86/mm: Disable broadcast TLB flush when PCID is disabled
CVE-2026-64228net: ethtool: phy: avoid NULL deref when PHY driver is unbound
CVE-2026-64230regulator: tps65219: fix irq_data.rdev not being assigned
CVE-2026-64231drm/msm/dsi: don't dump registers past the mapped region

Showing top 20 of 48 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-64211

No comments yet

Leave a comment