CVE-2025-38014

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2025-06-18 Modified: 2026-11-05 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Refactor remove call with idxd_cleanup() helper The idxd_cleanup() helper cleans up perfmon, interrupts, internals and so on. Refactor remove call with the idxd_cleanup() helper to avoid code duplication. Note, this also fixes the missing put_device() for idxd groups, enginces and wqs.

Affected Software (12)

VendorProductVersion
Linux Linux bfe1d56091c1a404b3d4ce7e9809d745fc4453bb < d530dd65f6f3c04bbf141702ecccd70170ed04ad
Linux Linux bfe1d56091c1a404b3d4ce7e9809d745fc4453bb < 23dc14c52d84b02b39d816bf16a754c0e7d48f9c
Linux Linux bfe1d56091c1a404b3d4ce7e9809d745fc4453bb < a7bd00f7e9bd075f3e4fbcc608d8ea445aed8692
Linux Linux bfe1d56091c1a404b3d4ce7e9809d745fc4453bb < a409e919ca321cc0e28f8abf96fde299f0072a81
Linux Linux 5.6
linux linux_kernel 5.6 – 6.6.92
linux linux_kernel 6.15
linux linux_kernel 6.15
linux linux_kernel 6.15
linux linux_kernel 6.15
linux linux_kernel 6.15
linux linux_kernel 6.15

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.19%
Raw Score 0.001940
Percentile 9.2%
Date 2026-11-06

EPSS Trend

2026-11-06
0.00194
2026-11-05
0.00194

Intelligence Sources

mitre ref →
nvd ref →