CVE-2024-40956: Use After Free

🗓️ 12 Jul 2024 00:00:00Reported by Rapid7Type

rapid7🔗 www.rapid7.com👁 1 Views

Use-After-Free in Linux kernel dmaengine idxd irq_process_work_list during descriptor reuse.

Reporter	Title	Published	Views	Family All 184
AstraLinux	Astra Linux – Vulnerability in Linux 6.1	23 Nov 202403:04	–	astralinux
BDU FSTEC	The vulnerability of the irq_process_work_list() function in the Linux kernel’s DMA driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.	23 Oct 202400:00	–	bdu_fstec
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ciqsa-2026_0785)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: kernel / kernel-64k / kernel-64k-core / kernel-64k-debug / etc Multiple Vulnerabilities (ciqsa-2026_0976)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool / bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1210)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.2 [CIQ] Security Update: bpftool / bpftool-debuginfo Multiple Vulnerabilities (ciqsa-2026_1254)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.4 [CIQ] Security Update: bpftool / bpftool-debuginfo / kernel / kernel-64k / kernel-64k-core / etc Multiple Vulnerabilities (ciqsa-2026_0512)	1 Oct 202600:00	–	nessus
Tenable Nessus	Rocky Linux 9.4 [CIQ] Security Update: kernel-rt-debug-debuginfo / kernel-rt-debuginfo Multiple Vulnerabilities (ciqsa-2026_1222)	1 Oct 202600:00	–	nessus
Tenable Nessus	Debian dla-4008 : linux-config-6.1 - security update	3 Jan 202500:00	–	nessus
Tenable Nessus	Debian dsa-5731 : affs-modules-6.1.0-21-4kc-malta-di - security update	16 Jul 202400:00	–	nessus

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-40956
cwe	www.cwe.mitre.org/data/definitions/416.html
git	www.git.kernel.org/stable/c/1b08bf5a17c66ab7dbb628df5344da53c8e7ab33
git	www.git.kernel.org/stable/c/83163667d881100a485b6c2daa30301b7f68d9b5
git	www.git.kernel.org/stable/c/a14968921486793f2a956086895c3793761309dd
git	www.git.kernel.org/stable/c/e3215deca4520773cd2b155bed164c12365149a7
git	www.git.kernel.org/stable/c/faa35db78b058a2ab6e074ee283f69fa398c36a8
git	www.git.kernel.org/stable/c/1b08bf5a17c66ab7dbb628df5344da53c8e7ab33
git	www.git.kernel.org/stable/c/83163667d881100a485b6c2daa30301b7f68d9b5
git	www.git.kernel.org/stable/c/a14968921486793f2a956086895c3793761309dd

05 Aug 2026 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.17.8

EPSS0.00268

SSVC

Linux kernel dmaengine idxd Use-After-Free irq_process_work_list idxd_desc_complete