CVE-2026-31441

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-31441
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix memory leak when a wq is reset idxd_wq_disable_cleanup() which is called from the reset path for a workqueue, sets the wq type to NONE, which for other parts of the driver mean that the wq is empty (all its resources were released). Only set the wq type to NONE after its resources are released.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/0c3d3ac57e3c52b570b8c695903306bff07e04c8 Patch
https://git.kernel.org/stable/c/39c1504e0e76bcfb93991fd94288a83e05d13b51 Patch
https://git.kernel.org/stable/c/54d77cc0c40ca2f894859dc7b3c52997574f1a2a Patch
https://git.kernel.org/stable/c/a16098a2f0c11ee5e04e23aa7478ca1fcfb0f658 Patch
https://git.kernel.org/stable/c/a9e7815d38629bcf59d3005001f1f315424a58de Patch
https://git.kernel.org/stable/c/d9cfb5193a047a92a4d3c0e91ea4cc87c8f7c478 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.8:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.8:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.8:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
History

07 May 2026, 19:30

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.8:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.8:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:5.8:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
First Time Linux linux Kernel
Linux
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE CWE-401
References () https://git.kernel.org/stable/c/0c3d3ac57e3c52b570b8c695903306bff07e04c8 - () https://git.kernel.org/stable/c/0c3d3ac57e3c52b570b8c695903306bff07e04c8 - Patch
References () https://git.kernel.org/stable/c/39c1504e0e76bcfb93991fd94288a83e05d13b51 - () https://git.kernel.org/stable/c/39c1504e0e76bcfb93991fd94288a83e05d13b51 - Patch
References () https://git.kernel.org/stable/c/54d77cc0c40ca2f894859dc7b3c52997574f1a2a - () https://git.kernel.org/stable/c/54d77cc0c40ca2f894859dc7b3c52997574f1a2a - Patch
References () https://git.kernel.org/stable/c/a16098a2f0c11ee5e04e23aa7478ca1fcfb0f658 - () https://git.kernel.org/stable/c/a16098a2f0c11ee5e04e23aa7478ca1fcfb0f658 - Patch
References () https://git.kernel.org/stable/c/a9e7815d38629bcf59d3005001f1f315424a58de - () https://git.kernel.org/stable/c/a9e7815d38629bcf59d3005001f1f315424a58de - Patch
References () https://git.kernel.org/stable/c/d9cfb5193a047a92a4d3c0e91ea4cc87c8f7c478 - () https://git.kernel.org/stable/c/d9cfb5193a047a92a4d3c0e91ea4cc87c8f7c478 - Patch

22 Apr 2026, 14:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-22 14:16

Updated : 2026-05-07 19:30

NVD link : CVE-2026-31441

Mitre link : CVE-2026-31441

CVE.ORG link : CVE-2026-31441

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-401

Missing Release of Memory after Effective Lifetime