CVE-2026-31442CWE-125CWE-416

CVE-2026-31442

High · published April 22, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
6.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Fix possible invalid memory access after FLR

In the case that the first Function Level Reset (FLR) concludes

correctly, but in the second FLR the scratch area for the saved

configuration cannot be allocated, it's possible for a invalid memory

access to happen.

Always set the deallocated scratch area to NULL after FLR completes.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00173 · 6.4th percentile
Weaknesses
CWE-125 · Out-of-bounds Read; CWE-416 · Use After Free
Published
2026-04-22T18:16Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 6.14, < 6.18.216.18.21
linux/linux_kernel≥ 6.19, < 6.19.116.19.11
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
https://git.kernel.org/stable/c/504c0e6751001ac46917c73e703f2b1b92cfc026 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/867d0c801f21370d561420fa32f2ea1a7dc3a22d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d6077df7b75d26e4edf98983836c05d00ebabd8d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 22 APR 13:53Z
    dmaengine: idxd: Fix possible invalid memory access after FLR
    cvelistv5