---
id: CVE-2026-31442
title: 'dmaengine: idxd: Fix possible invalid memory access after FLR'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  dmaengine: idxd: Fix possible invalid memory access after FLR

  In the case that the first Function Level Reset (FLR) concludes
  correctly, but in the second FLR the scra…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 98d187a989036096feaa2fef1ec3b2240ecdeacf <
    504c0e6751001ac46917c73e703f2b1b92cfc026
  - >-
    Linux >= 98d187a989036096feaa2fef1ec3b2240ecdeacf <
    867d0c801f21370d561420fa32f2ea1a7dc3a22d
  - >-
    Linux >= 98d187a989036096feaa2fef1ec3b2240ecdeacf <
    d6077df7b75d26e4edf98983836c05d00ebabd8d
  - Linux 6.14
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-10-16T15:09:18.455036Z'
published: '2026-04-22'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T15:10:00.401Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-31442'
references:
  - url: 'https://git.kernel.org/stable/c/504c0e6751001ac46917c73e703f2b1b92cfc026'
  - url: 'https://git.kernel.org/stable/c/867d0c801f21370d561420fa32f2ea1a7dc3a22d'
  - url: 'https://git.kernel.org/stable/c/d6077df7b75d26e4edf98983836c05d00ebabd8d'
tags:
  - cve.org
epss: 0.00173
epssPercentile: 0.06316
ingestedAt: '2026-10-16T17:24:46.651Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: idxd: Fix possible invalid memory access after FLR

In the case that the first Function Level Reset (FLR) concludes
correctly, but in the second FLR the scratch area for the saved
configuration cannot be allocated, it's possible for a invalid memory
access to happen.

Always set the deallocated scratch area to NULL after FLR completes.

## Affected

- `Linux >= 98d187a989036096feaa2fef1ec3b2240ecdeacf < 504c0e6751001ac46917c73e703f2b1b92cfc026`
- `Linux >= 98d187a989036096feaa2fef1ec3b2240ecdeacf < 867d0c801f21370d561420fa32f2ea1a7dc3a22d`
- `Linux >= 98d187a989036096feaa2fef1ec3b2240ecdeacf < d6077df7b75d26e4edf98983836c05d00ebabd8d`
- `Linux 6.14`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.