In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Fix double free in idxd_setup_wqs()
The clean up in idxd_setup_wqs() has had a couple bugs because the error handling is a bit subtle. It's simpler to just re-write it in a cleaner way. The issues here are:
1) If "idxd->max_wqs" is <= 0 then we call put_device(conf_dev) when "conf_dev" hasn't been initialized. 2) If kzalloc_node() fails then again "conf_dev" is invalid. It's either uninitialized or it points to the "conf_dev" from the previous iteration so it leads to a double free.
It's better to free partial loop iterations within the loop and then the unwinding at the end can handle whole loop iterations. I also renamed the labels to describe what the goto does and not where the goto was located.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Sep 23, 2025 |
| Suse | — | Upgrade kernel-kvmsmall-vdsoUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-syms-rtUpgrade kernel-sourceUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade dtb-freescaleUpgrade kernel-azureUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-defaultUpgrade dtb-socionextUpgrade kernel-obs-buildUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-rtUpgrade kernel-default-extraUpgrade kernel-rt_debugUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-rtUpgrade dtb-rockchipUpgrade cluster-md-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade dtb-marvellUpgrade dtb-amlogicUpgrade dtb-appleUpgrade kernel-azure-develUpgrade kernel-syms-azureUpgrade dtb-nvidiaUpgrade kernel-rt-optionalUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-lgUpgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade dlm-kmp-rtUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade dlm-kmp-64kbUpgrade kernel-debugUpgrade dtb-amazonUpgrade dtb-alteraUpgrade ocfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-source-azureUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade kernel-source-vanillaUpgrade kernel-debug-develUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade kernel-64kbUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade kernel-rt-develUpgrade kernel-develUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatch-devel | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-gke-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azureUpgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-aws-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-generic-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-genericUpgrade linux-image-gke-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-xilinxUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-fips-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-awsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-kvmUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-oracleUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-fipsUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-6.8.0-1050-raspi | Mar 17, 2026 | Sep 23, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Sep 23, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub