https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 11:35:34 +0000 https://vulnerability.circl.lu/vuln/cve-2025-39870 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>dmaengine: idxd: Fix double free in idxd_setup_wqs()</p> <p>The clean up in idxd_setup_wqs() has had a couple bugs because the error handling is a bit subtle. It&#39;s simpler to just re-write it in a cleaner way. The issues here are:</p> <p>1) If &#34;idxd-&gt;max_wqs&#34; is &lt;= 0 then we call put_device(conf_dev) when &#34;conf_dev&#34; hasn&#39;t been initialized. 2) If kzalloc_node() fails then again &#34;conf_dev&#34; is invalid. It&#39;s either uninitialized or it points to the &#34;conf_dev&#34; from the previous iteration so it leads to a double free.</p> <p>It&#39;s better to free partial loop iterations within the loop and then the unwinding at the end can handle whole loop iterations. I also renamed the labels to describe what the goto does and not where the goto was located.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>dmaengine: idxd: Fix double free in idxd_setup_wqs()</p> <p>The clean up in idxd_setup_wqs() has had a couple bugs because the error handling is a bit subtle. It&#39;s simpler to just re-write it in a cleaner way. The issues here are:</p> <p>1) If &#34;idxd-&gt;max_wqs&#34; is &lt;= 0 then we call put_device(conf_dev) when &#34;conf_dev&#34; hasn&#39;t been initialized. 2) If kzalloc_node() fails then again &#34;conf_dev&#34; is invalid. It&#39;s either uninitialized or it points to the &#34;conf_dev&#34; from the previous iteration so it leads to a double free.</p> <p>It&#39;s better to free partial loop iterations within the loop and then the unwinding at the end can handle whole loop iterations. I also renamed the labels to describe what the goto does and not where the goto was located.</p> https://vulnerability.circl.lu/vuln/cve-2025-39870