PT-2025-39127 · Linux+4 · Linux Kernel+4
Published
2025-08-11
·
Updated
2026-05-07
·
CVE-2025-39870
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A flaw exists in the Linux kernel’s dmaengine subsystem, specifically within the
idxd setup wqs() function. The issue involves a potential double free condition during cleanup operations. This can occur if idxd->max wqs is less than or equal to zero, leading to a call to put device(conf dev) before conf dev is initialized. Additionally, a double free can happen if memory allocation via kzalloc node() fails, resulting in conf dev being invalid or pointing to a previously freed device. The issue is addressed by restructuring the cleanup process to free partial loop iterations within the loop itself, simplifying error handling and improving code clarity.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Double Free
Access of Uninitialized Pointer
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu