CVE-2026-31436

CRITICAL EPSS 36.4%
Published Apr 22, 20262mo ago · Modified Jun 17, 20262w ago
9.8 CVSS 3.1
Critical
Find Similar
Published Apr 22, 2026 2mo ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() At the end of this function, d is the traversal cursor of flist, but the code completes found instead. This can lead to issues such as NULL pointer dereferences, double completion, or descriptor leaks. Fix this by completing d instead of found in the final list_for_each_entry_safe() loop.

CVSS Details

Base Score
9.8
Exploitability
3.9
Impact
5.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required None
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
36.4% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-476 NULL Pointer Dereference Memory Safety

Affected Products 9

VendorProductVersionRange
linuxlinux_kernel*≥6.8  –  <6.12.80
linuxlinux_kernel*≥6.13  –  <6.18.21
linuxlinux_kernel*≥6.19  –  <6.19.11
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any

References 4

  • git.kernel.org https://git.kernel.org/stable/c/0e4f43779d550e559be13a5cdb763bad92c4cc99
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/82656e8daf8de00935ae91b91bed43f4d6e0d644
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e1c9866173c5f8521f2d0768547a01508cb9ff27
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e21da2ad8844585040fe4b82be1ad2fe99d40074
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/0e4f43779d550e559be13a5cdb763bad92c4cc99
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/82656e8daf8de00935ae91b91bed43f4d6e0d644
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e1c9866173c5f8521f2d0768547a01508cb9ff27
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e21da2ad8844585040fe4b82be1ad2fe99d40074
    Patch