In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix memory leak when a wq is reset idxd_wq_disable_cleanup() which is called from the reset path for a workqueue, sets the wq type to NONE, which for other parts of the driver mean that the wq is empty (all its resources were released). Only set the wq type to NONE after its resources are released.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | LOCAL |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | LOW |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-401
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23beb84640> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d24246e78c0> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d236440c100> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23a52f5f80> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23a52f7a00> | Operating System |
| linux | linux_kernel | * | <built-in method update of dict object at 0x7d23a52f6080> | Operating System |
| linux | linux_kernel | 5.8 | <built-in method update of dict object at 0x7d246015ae40> | Operating System |
| linux | linux_kernel | 5.8 | <built-in method update of dict object at 0x7d23beb87100> | Operating System |
| linux | linux_kernel | 5.8 | <built-in method update of dict object at 0x7d2424651ec0> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d23a52f7640> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d23beb87840> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d236440c840> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d24246e6f00> | Operating System |
| linux | linux_kernel | 7.0 | <built-in method update of dict object at 0x7d23beb86880> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:5.8:-:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:5.8:rc6:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:5.8:rc7:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* |
| Yes | cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* |