VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 12, 2024· Updated Nov 3, 2025

dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list

CVE-2024-40956

Description

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list

Use list_for_each_entry_safe() to allow iterating through the list and deleting the entry in the iteration process. The descriptor is freed via idxd_desc_complete() and there's a slight chance may cause issue for the list iterator when the descriptor is reused by another thread without it being deleted from the list.

Affected products

204

Patches

5
faa35db78b05
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
e3215deca452
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
a14968921486
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
83163667d881
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit
1b08bf5a17c6
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.gitvia osv
commit

Vulnerability mechanics

Generated on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

5

News mentions

0

No linked articles in our index yet.