In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Fix double free in idxd_setup_wqs()
The clean up in idxd_setup_wqs() has had a couple bugs because the error handling is a bit subtle. It's simpler to just re-write it in a cleaner way. The issues here are:
1) If "idxd->max_wqs" is <= 0 then we call put_device(conf_dev) when "conf_dev" hasn't been initialized. 2) If kzalloc_node() fails then again "conf_dev" is invalid. It's either uninitialized or it points to the "conf_dev" from the previous iteration so it leads to a double free.
It's better to free partial loop iterations within the loop and then the unwinding at the end can handle whole loop iterations. I also renamed the labels to describe what the goto does and not where the goto was located.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Sep 25, 2025 | Sep 25, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Sep 23, 2025 |
| Suse | — | Upgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-64kbUpgrade kernel-rt-livepatchUpgrade dtb-exynosUpgrade kernel-source-vanillaUpgrade kernel-azure-optionalUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade dtb-armUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kselftests-kmp-64kbUpgrade kernel-debug-develUpgrade kernel-default-livepatch-develUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade kernel-source-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-amazonUpgrade kernel-symsUpgrade reiserfs-kmp-azureUpgrade kernel-develUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-optionalUpgrade dlm-kmp-rtUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kernel-rtUpgrade kernel-kvmsmallUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade dtb-qcomUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-rtUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade kernel-default-extraUpgrade dtb-socionextUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-azureUpgrade dtb-freescaleUpgrade ocfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade kernel-rt_debugUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-develUpgrade kernel-docsUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade kernel-syms-rtUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade kernel-zfcpdumpUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade dtb-appleUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade cluster-md-kmp-azure | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-kvmUpgrade linux-image-gcp-6.8Upgrade linux-image-xilinxUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-oracleUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-gcpUpgrade linux-image-fips-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-aws-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1050-awsUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-fipsUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-gkeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-aws-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-azureUpgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-genericUpgrade linux-image-azure-fipsUpgrade linux-image-oem-22.04cUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-2040-raspi-realtime | Mar 17, 2026 | Sep 23, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Sep 23, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub