CVE-2026-74574

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open()<br /> <br /> The failed_dev_add and failed_dev_name paths drop the file-device<br /> reference while wq-&gt;wq_lock is still held. If put_device(fdev) drops the<br /> last reference, idxd_file_dev_release() runs synchronously and tries to<br /> take wq-&gt;wq_lock again, deadlocking.<br /> <br /> Those paths also fall through into the later ctx cleanup labels even<br /> though idxd_file_dev_release() owns that cleanup and frees ctx. This can<br /> make idxd_xa_pasid_remove(ctx) and kfree(ctx) operate on a freed context.<br /> <br /> Move idxd_wq_get() before file-device setup can fail, since the release<br /> callback always calls idxd_wq_put(). Then unlock wq-&gt;wq_lock before<br /> put_device(fdev) and return directly from the file-device setup failure<br /> path, leaving ctx cleanup to the release callback.