CVE-2024-40956

Katalog CVE

CVSS 7.8 · High EPSS 0,27%

Kerentanan Use After Free pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list Use list_for_each_entry_safe() to allow iterating through the list and deleting the entry in the iteration process. The descriptor is freed via idxd_desc_complete() and there's a slight chance may cause issue for the list iterator when the descriptor is reused by another thread without it being deleted from the list.

Rincian

Terbit di NVD

12 Juli 2024

Terakhir diubah

4 Agustus 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

0,27% peluang dieksploitasi; lebih tinggi dari 17,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/1b08bf5a17c66ab7dbb628df5344da53c8e7ab33 patch
• https://git.kernel.org/stable/c/83163667d881100a485b6c2daa30301b7f68d9b5 patch
• https://git.kernel.org/stable/c/a14968921486793f2a956086895c3793761309dd patch
• https://git.kernel.org/stable/c/e3215deca4520773cd2b155bed164c12365149a7 patch
• https://git.kernel.org/stable/c/faa35db78b058a2ab6e074ee283f69fa398c36a8 patch
• https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html