CVE-2025-39870

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel’s dmaengine subsystem, specifically within the idxd setup wqs() function. The issue involves a potential double free condition during cleanup operations. This can occur if idxd->max wqs is less than or equal to zero, leading to a call to put device(conf dev) before conf dev is initialized. Additionally, a double free can happen if memory allocation via kzalloc node() fails, resulting in conf dev being invalid or pointing to a previously freed device. The issue is addressed by restructuring the cleanup process to free partial loop iterations within the loop itself, simplifying error handling and improving code clarity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.