CVEvulnerability
CVE-2026-31442
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2026-04-22
- Last modified
- 2026-10-19
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-125, CWE-416
Description
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Fix possible invalid memory access after FLR
In the case that the first Function Level Reset (FLR) concludes
correctly, but in the second FLR the scratch area for the saved
configuration cannot be allocated, it's possible for a invalid memory
access to happen.
Always set the deallocated scratch area to NULL after FLR completes.
Affected configurations
• linux linux kernel (>= 6.14 < 6.18.21)
• linux linux kernel (>= 6.19 < 6.19.11)
• linux linux kernel 7.0