In the Linux kernel, the following vulnerability has been resolved:
dma: fix call order in dmam_free_coherent
dmam_free_coherent() frees a DMA allocation, which makes the freed vaddr available for reuse, then calls devres_destroy() to remove and free the data structure used to track the DMA allocation. Between the two calls, it is possible for a concurrent task to make an allocation with the same vaddr and add it to the devres list.
If this happens, there will be two entries in the devres list with the same vaddr and devres_destroy() can free the wrong entry, triggering the WARN_ON() in dmam_match.
Fix by destroying the devres entry before freeing the DMA allocation.
kokonut //net/encryption http://sponge2/b9145fe6-0f72-4325-ac2f-a84d81075b03
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade kernel-develUpgrade kernel-livepatch-5.10.224-212.876Upgrade python-perfUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.165-110.161Upgrade kernel-livepatch-4.14.353-270.569Upgrade bpftoolUpgrade kernel | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade perfUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.106-116.188Upgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade kernel-develUpgrade kernel-modules-extra-commonUpgrade kernel-tools-develUpgrade kernelUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpf-static | Oct 16, 2025 | Aug 17, 2024 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 2, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Nov 11, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Dec 12, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelists | Dec 12, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel | Nov 11, 2024 | Aug 17, 2024 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Aug 17, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Dec 5, 2024 | Aug 17, 2024 |
| Suse | — | Upgrade dtb-armUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-baseUpgrade kselftests-kmp-rtUpgrade kernel-debug-vdsoUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-syms-rtUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade kernel-azure-vdsoUpgrade kernel-devel-rtUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-rtUpgrade kernel-rt-develUpgrade cluster-md-kmp-defaultUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade kernel-develUpgrade kernel-debug-livepatch-develUpgrade kernel-default-manUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-renesasUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-source-vanillaUpgrade dtb-socionextUpgrade kernel-azureUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade kernel-azure-develUpgrade kernel-rt-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade gfs2-kmp-rtUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-rt_debugUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade ocfs2-kmp-rtUpgrade kernel-source-rtUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-rt_debug-develUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-develUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade kernel-azure-optionalUpgrade dtb-lgUpgrade dlm-kmp-64kbUpgrade kernel-azure-baseUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-exynosUpgrade dtb-caviumUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade dtb-appleUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dtb-apm | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-5.4.0-1139-azureUpgrade linux-image-kvmUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1169-gcpUpgrade linux-image-5.4.0-1140-azureUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-262-lowlatencyUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-4.15.0-1138-oracleUpgrade linux-image-5.4.0-1094-bluefieldUpgrade linux-image-5.4.0-1139-gcpUpgrade linux-image-5.4.0-1123-kvmUpgrade linux-image-awsUpgrade linux-image-4.15.0-1159-kvmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-aws-hweUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-4.15.0-232-genericUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.4.0-1119-raspiUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1134-oracleUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-4.15.0-232-lowlatencyUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-200-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-5.15.0-1072-awsUpgrade linux-image-4.15.0-1184-azureUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-5.4.0-200-generic-lpaeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oem-24.04Upgrade linux-image-raspiUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-5.15.0-125-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-azure-lts-18.04Upgrade linux-image-6.8.0-1020-azureUpgrade linux-image-gkeopUpgrade linux-image-nvidia-64kUpgrade linux-image-intelUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-1139-awsUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.15.0-1176-awsUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-5.4.0-1044-iotUpgrade linux-image-nvidiaUpgrade linux-image-virtualUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1135-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1102-gkeopUpgrade linux-image-5.15.0-125-genericUpgrade linux-image-4.4.0-1177-awsUpgrade linux-image-azure-lts-20.04Upgrade linux-image-azureUpgrade linux-image-4.4.0-262-genericUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-4.4.0-1140-kvmUpgrade linux-image-5.4.0-200-genericUpgrade linux-image-oem-20.04bUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1082-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-5.15.0-1075-azureUpgrade linux-image-5.4.0-1054-xilinx-zynqmpUpgrade linux-image-5.15.0-1055-gkeop | Nov 4, 2024 | Aug 17, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub