CVE-2025-39870 | Linux Kernel up to ed2c66000aa64c0d2621864831f0d04c820a1441 dmaengine idxd_setup_wqs uninitialized pointer

September 23, 2025 Yanac

A vulnerability marked as critical has been reported in Linux Kernel up to ed2c66000aa64c0d2621864831f0d04c820a1441. This vulnerability affects the function idxd_setup_wqs of the component dmaengine. Performing manipulation results in uninitialized pointer.

This vulnerability is identified as CVE-2025-39870. The attack can only be performed from the local network. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More