CVE-2024-38629

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Avoid unnecessary destruction of file_ida file_ida is allocated during cdev open and is freed accordingly during cdev release. This sequence is guaranteed by driver file operations. Therefore, there is no need to destroy an already empty file_ida when the WQ cdev is removed. Worse, ida_free() in cdev release may happen after destruction of file_ida per WQ cdev. This can lead to accessing an id in file_ida after it has been destroyed, resulting in a kernel panic. Remove ida_destroy(&file_ida) to address these issues.

• CWE-416

• https://git.kernel.org/stable/c/15edb906211bf53e7b5574f7326ab734d6bff4f9Patch
• https://git.kernel.org/stable/c/76e43fa6a456787bad31b8d0daeabda27351a480Patch
• https://git.kernel.org/stable/c/9eb15f24a0b9b017b39cde8b8c07243676b63687Patch
• https://git.kernel.org/stable/c/15edb906211bf53e7b5574f7326ab734d6bff4f9Patch
• https://git.kernel.org/stable/c/76e43fa6a456787bad31b8d0daeabda27351a480Patch
• https://git.kernel.org/stable/c/9eb15f24a0b9b017b39cde8b8c07243676b63687Patch

Published

Jun 21, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-38623In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-38624In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38625In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38626In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38627In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-38628In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-3863The executable file warning was not presented when downloadi…9.8
• CVE-2024-38630In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-38631In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-38632In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38633In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38634In the Linux kernel, the following vulnerability has been re…5.5