CVE-2024-38629: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability in the Linux kernel's DMA engine IDXD driver was discovered and resolved in June 2024. The issue (CVE-2024-38629) involves unnecessary destruction of file_ida in the driver's character device handling. The file_ida is allocated during cdev open and freed during cdev release, with this sequence being guaranteed by driver file operations (Kernel Git).

The vulnerability stems from an unnecessary ida_destroy(&file_ida) call when the WQ cdev is removed. This can lead to a race condition where ida_free() in cdev release may occur after the destruction of file_ida per WQ cdev, potentially resulting in accessing an already destroyed id in file_ida. This condition can trigger a kernel panic, affecting system stability (Kernel Git).

When exploited, this vulnerability can cause a denial of service condition through a kernel panic, affecting system availability. The issue specifically impacts systems using the IDXD (Intel Data Accelerator) driver in the Linux kernel (Ubuntu Security).

The vulnerability requires local access to the system running the affected Linux kernel version. It can be triggered through normal operation of the IDXD driver's character device interface (NVD).

The issue has been fixed by removing the unnecessary ida_destroy(&file_ida) call in the driver code. The fix has been implemented in various Linux distributions, including Ubuntu 24.04 LTS (noble) where it was fixed in version 6.8.0-44.44 (Ubuntu Security).