{"apiVersion":"1.0","identifier":"CVE-2026-99058","description":"In the Linux kernel, the following vulnerability has been resolved: workqueue: Fix NULL current_pwq deref in chained work check current_wq_worker() only tells us that %current is a kworker. It does not guarantee that the worker is currently executing a work item, as worker->current_pwq is populated only while process_one_work() is running the work function. is_chained_work() can be reached while queueing on a draining or destroying workqueue. If a kworker outside work-item execution reaches that path, current_wq_worker() returns a worker but worker->current_pwq is NULL, and the chained-work test can fault before it emits the intended warning. Guard the chained-work test with worker->current_pwq. A kworker without current_pwq is not executing work on the target workqueue, so the helper should return false and let the draining/destroying warning fire.","publishedAt":"2026-10-23T13:17:29","lastModifiedAt":"2026-10-30T13:21:42","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-99058","cvssScore":null,"cvssVector":null,"epssProbability":0.00191,"riskScore":null,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-99058","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-99058","en":"https://www.redsauce.net/en/cves/CVE-2026-99058","fr":"https://www.redsauce.net/fr/cves/CVE-2026-99058","pt":"https://www.redsauce.net/pt/cves/CVE-2026-99058","de":"https://www.redsauce.net/de/cves/CVE-2026-99058","sk":"https://www.redsauce.net/sk/cves/CVE-2026-99058","el":"https://www.redsauce.net/el/cves/CVE-2026-99058"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-99058"}}