CVE-2026-31436: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc()
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: fix possible wrong descriptor completion in llistabortdesc()
At the end of this function, d is the traversal cursor of flist, but the code completes found instead. This can lead to issues such as NULL pointer dereferences, double completion, or descriptor leaks.
Fix this by completing d instead of found in the final listforeachentrysafe() loop.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2026-31436?
CVE-2026-31436 is a critical severity vulnerability in the Linux kernel related to incorrect descriptor completion in the dmaengine subsystem.
What is the severity of CVE-2026-31436?
CVE-2026-31436 has a severity rating of 9.8, categorizing it as critical.
How do I fix CVE-2026-31436?
To fix CVE-2026-31436, users should update their Linux kernel to the latest patched version provided by their distribution.
What are the potential impacts of CVE-2026-31436?
The potential impacts of CVE-2026-31436 include system crashes and exploit opportunities due to NULL pointer dereferences.
Is CVE-2026-31436 exploitable remotely?
Yes, CVE-2026-31436 is exploitable remotely due to its nature of vulnerability in the Linux kernel.