CVE-2024-40991

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Fix ofk3udmaglueparsechnbyid The ofk3udmaglueparsechnbyid helper function erroneously invokes "ofnodeput" on the "udmaxnp" device-node passed to it, without having incremented its reference count at a...

CVE-2024-40991 dmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id()

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Fix ofk3udmaglueparsechnbyid The ofk3udmaglueparsechnbyid helper function erroneously invokes "ofnodeput" on the "udmaxnp" device-node passed to it, without having incremented its reference count at a...

CVE-2024-40991 dmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id()

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Fix ofk3udmaglueparsechnbyid The ofk3udmaglueparsechnbyid helper function erroneously invokes "ofnodeput" on the "udmaxnp" device-node passed to it, without having incremented its reference count at a...

CVE-2024-40991

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Fix ofk3udmaglueparsechnbyid The ofk3udmaglueparsechnbyid helper function erroneously invokes "ofnodeput" on the "udmaxnp" device-node passed to it, without having incremented its reference count at a...

CVE-2024-40991 dmaengine: ti: k3-udma-glue: Fix of_k3_udma_glue_parse_chn_by_id()

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Fix ofk3udmaglueparsechnbyid The ofk3udmaglueparsechnbyid helper function erroneously invokes "ofnodeput" on the "udmaxnp" device-node passed to it, without having incremented its reference count at a...

CVE-2024-40991

The CVE-2024-40991 issue concerns the Linux kernel DMA driver: dmaengine: ti: k3-udma-glue, where the helper of_k3_udma_glue_parse_chn_by_id() calls of_node_put() on the udmax_np node without ever incrementing its reference count. The connected documents confirm this root cause and indicate the v...

CVE-2024-40986 dmaengine: xilinx: xdma: Fix data synchronisation in xdma_channel_isr()

In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix data synchronisation in xdmachannelisr Requests the vchan lock before using xdma-stoprequest...

CVE-2024-40986

Summary (concrete details from connected documents): The Linux kernel DMA engine Xilinx XDMA driver (xdma.c) had a synchronization flaw in xdma_channel_isr() where the vchan lock was not acquired before using xdma->stop_request. Affected component: dmaengine: xilinx: xdma. Root cause: lack of ...

CVE-2024-40956

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible Use-After-Free in irqprocessworklist Use listforeachentrysafe to allow iterating through the list and deleting the entry in the iteration process. The descriptor is freed via idxddesccomplete and...

CVE-2024-40956 dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible Use-After-Free in irqprocessworklist Use listforeachentrysafe to allow iterating through the list and deleting the entry in the iteration process. The descriptor is freed via idxddesccomplete and...

CVE-2024-40956

CVE-2024-40956 affects the Linux kernel (dmaengine: idxd). The vulnerability is a use-after-free in irq_process_work_list, caused by reusing a descriptor while it may still be referenced. The fix uses list_for_each_entry_safe() to safely iterate and delete entries during the loop; freeing the des...

CVE-2024-40956 dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible Use-After-Free in irqprocessworklist Use listforeachentrysafe to allow iterating through the list and deleting the entry in the iteration process. The descriptor is freed via idxddesccomplete and...

CVE-2024-40956 dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible Use-After-Free in irqprocessworklist Use listforeachentrysafe to allow iterating through the list and deleting the entry in the iteration process. The descriptor is freed via idxddesccomplete and...

CVE-2024-40991: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dmaengine: ti: k3-udma-glue: Fix ofk3udmaglueparsechnbyid The ofk3udmaglueparsechnbyid helper function erroneously invokes "ofnodeput" on the "udmaxnp" device-node passed to it, without having incremented its reference count at a...

CVE-2024-40986: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dmaengine: xilinx: xdma: Fix data synchronisation in xdmachannelisr Requests the vchan lock before using xdma-stoprequest...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a data synchronization issue in the interrupt service routine of the dmaengine:xilinx:xdma component...

CVE-2024-40956: Use After Free

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible Use-After-Free in irqprocessworklist Use listforeachentrysafe to allow iterating through the list and deleting the entry in the iteration process. The descriptor is freed via idxddesccomplete and...

Linux kernel security vulnerabilities

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel due to a reference counting issue in the ofk3udmaglueparsechnbyid function of the dmaengine:ti:k3-udma-glue component...

SUSE CVE-2024-38629

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Avoid unnecessary destruction of fileida fileida is allocated during cdev open and is freed accordingly during cdev release. This sequence is guaranteed by driver file operations. Therefore, there is no need to...

CVE-2024-38629

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Avoid unnecessary destruction of fileida fileida is allocated during cdev open and is freed accordingly during cdev release. This sequence is guaranteed by driver file operations. Therefore, there is no need to...