CVE-2026-68318

A flaw was found in the pds_core component of the Linux kernel. This use-after-free vulnerability occurs because the workqueue is destroyed prematurely during the pdsc_remove() operation, before pdsc_teardown() completes. This timing issue allows for work to be queued on an already destroyed workqueue, which can lead to system instability or potentially other impacts. The flaw can be triggered by specific error paths or NotifyQ events during device removal.

This issue affects AMD Pensando (pds_core) devices. Workqueue is destroyed before teardown completes, allowing UAF from queued work. Systems without pds_core hardware are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the pds_core module from loading. See https://access.redhat.com/solutions/41278 for instructions.