CVE-2025-38014
MEDIUM severity · CVSS 5.5
5.5CVSS MEDIUM
Summary
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper The idxd_cleanup() helper cleans up perfmon, interrupts, internals and so on. Refactor remove call with the idxd_cleanup() helper to avoid code duplication. Note, this also fixes the missing put_device() for idxd groups, enginces and wqs.
Impact & exploitability
Attack vectorLocal
Attack complexityLow
Privileges requiredLow
User interactionNone
Confidentiality impactNone
Integrity impactNone
Availability impactHigh
Exploit probability (EPSS)0%
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Official patch: https://git.kernel.org/stable/c/23dc14c52d84b02b39d816bf16a754c0e7d48f9c ↗
Additional information
- NVD record
- https://git.kernel.org/stable/c/23dc14c52d84b02b39d816bf16a754c0e7d48f9cPatch
- https://git.kernel.org/stable/c/a409e919ca321cc0e28f8abf96fde299f0072a81Patch
- https://git.kernel.org/stable/c/a7bd00f7e9bd075f3e4fbcc608d8ea445aed8692Patch
- https://git.kernel.org/stable/c/d530dd65f6f3c04bbf141702ecccd70170ed04adPatch