In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Remove improper idxd_free
The call to idxd_free() introduces a duplicate put_device() leading to a reference count underflow: refcount_t: underflow; use-after-free. WARNING: CPU: 15 PID: 4428 at lib/refcount.c:28 refcount_warn_saturate+0xbe/0x110 ... Call Trace: <TASK> idxd_remove+0xe4/0x120 [idxd] pci_device_remove+0x3f/0xb0 device_release_driver_internal+0x197/0x200 driver_detach+0x48/0x90 bus_remove_driver+0x74/0xf0 pci_unregister_driver+0x2e/0xb0 idxd_exit_module+0x34/0x7a0 [idxd] __do_sys_delete_module.constprop.0+0x183/0x280 do_syscall_64+0x54/0xd70 entry_SYSCALL_64_after_hwframe+0x76/0x7e
The idxd_unregister_devices() which is invoked at the very beginning of idxd_remove(), already takes care of the necessary put_device() through the following call path: idxd_unregister_devices() -> device_unregister() -> put_device()
In addition, when CONFIG_DEBUG_KOBJECT_RELEASE is enabled, put_device() may trigger asynchronous cleanup via schedule_delayed_work(). If idxd_free() is called immediately after, it can result in a use-after-free.
Remove the improper idxd_free() to avoid both the refcount underflow and potential memory corruption during module unload.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Feb 11, 2026 | Feb 11, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Nov 11, 2025 | Sep 23, 2025 |
| Suse | — | Upgrade kernel-rt_debug-develUpgrade ocfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade reiserfs-kmp-rtUpgrade dtb-marvellUpgrade kernel-debug-vdsoUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-docs-htmlUpgrade dlm-kmp-rtUpgrade dtb-broadcomUpgrade kernel-rt-develUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-source-rtUpgrade kselftests-kmp-rtUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-64kb-optionalUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade dtb-armUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kernel-azure-extraUpgrade dtb-mediatekUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-devel-rtUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade kernel-azureUpgrade kernel-docsUpgrade dtb-nvidiaUpgrade kselftests-kmp-azureUpgrade kernel-rt-optionalUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade kernel-debug-develUpgrade dtb-amdUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade kernel-rt-livepatchUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade dtb-amlogicUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-rtUpgrade kernel-default-livepatchUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade dtb-lgUpgrade dtb-apmUpgrade kernel-rtUpgrade kernel-default-develUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade dtb-rockchipUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall | Dec 5, 2025 | Oct 15, 2025 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-xilinxUpgrade linux-image-xilinx-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1049-nvidia-lowlatency-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1047-oracleUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1049-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-6.8Upgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1048-gke-64kUpgrade linux-image-6.8.0-106-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04bUpgrade linux-image-aws-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1052-azure-fipsUpgrade linux-image-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-gcp-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-106-genericUpgrade linux-image-aws-fips-6.8Upgrade linux-image-generic-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1050-awsUpgrade linux-image-oracle-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1050-aws-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-2040-raspi-realtimeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-106-generic-64kUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1052-gcp-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-106-fipsUpgrade linux-image-nvidiaUpgrade linux-image-awsUpgrade linux-image-6.8.0-1029-xilinxUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1047-oracle-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1035-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1049-nvidiaUpgrade linux-image-aws-fipsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1050-aws-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1052-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1049-nvidia-64kUpgrade linux-image-6.8.0-1049-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1052-gcp-fipsUpgrade linux-image-6.8.0-1048-gkeUpgrade linux-image-6.8.0-1050-raspiUpgrade linux-image-6.8.1-1045-realtimeUpgrade linux-image-realtimeUpgrade linux-image-6.8.0-106-lowlatencyUpgrade linux-image-oem-22.04a | Mar 17, 2026 | Sep 23, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 22, 2026 | Sep 23, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub