{"id":"CVE-2026-31442","title":"dmaengine: idxd: Fix possible invalid memory access after FLR","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: idxd: Fix possible invalid memory access after FLR\n\nIn the case that the first Function Level Reset (FLR) concludes\ncorrectly, but in the second FLR the scra…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 98d187a989036096feaa2fef1ec3b2240ecdeacf < 504c0e6751001ac46917c73e703f2b1b92cfc026","Linux >= 98d187a989036096feaa2fef1ec3b2240ecdeacf < 867d0c801f21370d561420fa32f2ea1a7dc3a22d","Linux >= 98d187a989036096feaa2fef1ec3b2240ecdeacf < d6077df7b75d26e4edf98983836c05d00ebabd8d","Linux 6.14"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-10-16T15:09:18.455036Z"},"published":"2026-04-22","updated":"2026-10-16","sourceUpdated":"2026-10-16T15:10:00.401Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-31442","references":[{"url":"https://git.kernel.org/stable/c/504c0e6751001ac46917c73e703f2b1b92cfc026"},{"url":"https://git.kernel.org/stable/c/867d0c801f21370d561420fa32f2ea1a7dc3a22d"},{"url":"https://git.kernel.org/stable/c/d6077df7b75d26e4edf98983836c05d00ebabd8d"}],"tags":["cve.org"],"epss":0.00173,"epssPercentile":0.06316,"ingestedAt":"2026-10-16T17:24:46.651Z","slug":"CVE-2026-31442","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: idxd: Fix possible invalid memory access after FLR\n\nIn the case that the first Function Level Reset (FLR) concludes\ncorrectly, but in the second FLR the scratch area for the saved\nconfiguration cannot be allocated, it's possible for a invalid memory\naccess to happen.\n\nAlways set the deallocated scratch area to NULL after FLR completes.\n\n## Affected\n\n- `Linux >= 98d187a989036096feaa2fef1ec3b2240ecdeacf < 504c0e6751001ac46917c73e703f2b1b92cfc026`\n- `Linux >= 98d187a989036096feaa2fef1ec3b2240ecdeacf < 867d0c801f21370d561420fa32f2ea1a7dc3a22d`\n- `Linux >= 98d187a989036096feaa2fef1ec3b2240ecdeacf < d6077df7b75d26e4edf98983836c05d00ebabd8d`\n- `Linux 6.14`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}