CVE-2024-40956

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-40956
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-40956.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-40956
Downstream
Related
Published
2024-07-12T12:31:59.027Z
Modified
2025-11-27T19:34:51.031070Z
Summary
dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
Details

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Fix possible Use-After-Free in irqprocesswork_list

Use listforeachentrysafe() to allow iterating through the list and deleting the entry in the iteration process. The descriptor is freed via idxddesccomplete() and there's a slight chance may cause issue for the list iterator when the descriptor is reused by another thread without it being deleted from the list.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/blob/ee626f5d79d5817bb21d6f048dc0da4c4e383443/cves/2024/40xxx/CVE-2024-40956.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
16e19e11228ba660d9e322035635e7dcf160d5c2
Fixed
1b08bf5a17c66ab7dbb628df5344da53c8e7ab33
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
16e19e11228ba660d9e322035635e7dcf160d5c2
Fixed
83163667d881100a485b6c2daa30301b7f68d9b5
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
16e19e11228ba660d9e322035635e7dcf160d5c2
Fixed
faa35db78b058a2ab6e074ee283f69fa398c36a8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
16e19e11228ba660d9e322035635e7dcf160d5c2
Fixed
a14968921486793f2a956086895c3793761309dd
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
16e19e11228ba660d9e322035635e7dcf160d5c2
Fixed
e3215deca4520773cd2b155bed164c12365149a7

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.162
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.96
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.36
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.9.7