CVE-2026-31441

MEDIUM

dmaengine: idxd: Fix memory leak when a wq is reset

Title source: cna
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix memory leak when a wq is reset idxd_wq_disable_cleanup() which is called from the reset path for a workqueue, sets the wq type to NONE, which for other parts of the driver mean that the wq is empty (all its resources were released). Only set the wq type to NONE after its resources are released.

References (8)

Core 8

Scores

CVSS v3 5.5
EPSS 0.0012
EPSS Percentile 2.4%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-401
Status published
Products (24)
linux/Kernel 5.8.0 - 6.1.168linux
linux/Kernel 6.13.0 - 6.18.21linux
linux/Kernel 6.19.0 - 6.19.11linux
linux/Kernel 6.2.0 - 6.6.131linux
linux/Kernel 6.7.0 - 6.12.80linux
Linux/Linux < 5.8
Linux/Linux 2a2df2bd10de44c3804661ed15157817c12d6291
Linux/Linux 5.7.10 - 5.8
Linux/Linux 5.8
Linux/Linux 6.1.168 - 6.1.*
... and 14 more
Published Apr 22, 2026
Tracked Since Apr 22, 2026