Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-40956
HistoryJul 12, 2024 - 12:31 p.m.

CVE-2024-40956 dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list

2024-07-1212:31:59
Linux
github.com
2
linux kernel
dmaengine
use-after-free

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list

Use list_for_each_entry_safe() to allow iterating through the list and
deleting the entry in the iteration process. The descriptor is freed via
idxd_desc_complete() and there’s a slight chance may cause issue for
the list iterator when the descriptor is reused by another thread
without it being deleted from the list.

AI Score

6.6

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial