VULNERABILITY INTELLIGENCE
CVE-2026-31442
CVSS score7.8 HIGH
EPSS probability0.17%
CISA KEVNot currently listed
Published2026-04-22
Last modified2026-10-19
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible invalid memory access after FLR In the case that the first Function Level Reset (FLR) concludes correctly, but in the second FLR the scratch area for the saved configuration cannot be allocated, it's possible for a invalid memory access to happen. Always set the deallocated scratch area to NULL after FLR completes.
Weakness classification
- CWE-125: Out-of-bounds Read
- CWE-416: Use After Free