עברית

Vulnerability Intelligence

CVE-2026-31442

High 7.8

Published
Last modified
NVD status
Modified

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix possible invalid memory access after FLR In the case that the first Function Level Reset (FLR) concludes correctly, but in the second FLR the scratch area for the saved configuration cannot be allocated, it's possible for a invalid memory access to happen. Always set the deallocated scratch area to NULL after FLR completes.

Affected products

linux: linux kernel

References3

Metrics

CVSS 3.1
7.8 HIGH Score source: CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS — exploit probability
0% percentile: 2 · as of 13 November 2026
CWE
CWE-125CWE-416

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.