CVE - CVE-2024-40956

CVE-ID
CVE-2024-40956	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list Use list_for_each_entry_safe() to allow iterating through the list and deleting the entry in the iteration process. The descriptor is freed via idxd_desc_complete() and there's a slight chance may cause issue for the list iterator when the descriptor is reused by another thread without it being deleted from the list.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/1b08bf5a17c66ab7dbb628df5344da53c8e7ab33 URL:https://git.kernel.org/stable/c/1b08bf5a17c66ab7dbb628df5344da53c8e7ab33 MISC:https://git.kernel.org/stable/c/83163667d881100a485b6c2daa30301b7f68d9b5 URL:https://git.kernel.org/stable/c/83163667d881100a485b6c2daa30301b7f68d9b5 MISC:https://git.kernel.org/stable/c/a14968921486793f2a956086895c3793761309dd URL:https://git.kernel.org/stable/c/a14968921486793f2a956086895c3793761309dd MISC:https://git.kernel.org/stable/c/e3215deca4520773cd2b155bed164c12365149a7 URL:https://git.kernel.org/stable/c/e3215deca4520773cd2b155bed164c12365149a7 MISC:https://git.kernel.org/stable/c/faa35db78b058a2ab6e074ee283f69fa398c36a8 URL:https://git.kernel.org/stable/c/faa35db78b058a2ab6e074ee283f69fa398c36a8
Assigning CNA
kernel.org
Date Record Created
20240712	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20240712)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)