Security tracker / CVE-2025-39871

CVE-2025-39871

dmaengine: idxd: Remove improper idxd_free

References

• Debian security tracker
• cve.org

Notes

 carnil> Introduced in d5449ff1b04d ("dmaengine: idxd: Add missing idxd cleanup to fix
 carnil> memory leak in remove call"). Vulnerable versions: 6.1.140 6.6.92 6.12.30
 carnil> 6.14.8 6.15.

Bugs

Status

Branch	Status
upstream	released (6.17-rc6) [f41c538881eec4dcf5961a242097d447f848cda6]
6.18-upstream-stable	N/A "Fixed before branching point"
6.17-upstream-stable	N/A "Fixed before branching point"
6.16-upstream-stable	released (6.16.8) [da4fbc1488a4cec6748da685181ee4449a878dac]
6.12-upstream-stable	released (6.12.48) [dd7a7e43269711d757fc260b0bbdf7138f75de11]
6.6-upstream-stable	released (6.6.107) [0e95ee7f532b21206fe3f1c4054002b0d21e3b9c]
6.1-upstream-stable	needed
5.10-upstream-stable	N/A "Vulnerable code not present"
sid	released (6.16.8-1)
6.12-trixie-security	released (6.12.48-1)
6.1-bookworm-security	needed
5.10-bullseye-security	N/A "Vulnerable code not present"