CVE-2026-31441: dmaengine: idxd: Fix memory leak when a wq is reset

Q: What conditions are required to trigger this issue?

The issue occurs when an idxd workqueue is reset. The affected cleanup path can mark the workqueue as empty before its resources have actually been released, resulting in a memory leak.

Q: Is this remotely exploitable?

The supplied CVSS vector identifies local access, low attack complexity, and low privileges as required, with no user interaction. It does not indicate a remote attack vector.

Q: What is the practical impact?

The vulnerability affects availability: repeated triggering of the affected workqueue reset path can leak memory. The supplied CVSS vector indicates no confidentiality or integrity impact.

Q: Which software is identified as affected?

The data identifies the Linux kernel and Microsoft azl3 kernel 6.6.130.1-3. The vulnerability has been resolved, but no fixed version is provided in the supplied data.

Published Apr 22, 2026

Updated

dmaengine: idxd: Fix memory leak when a wq is reset

Affected Software

16 affected componentsFixes available

Linux Linux kernel

Microsoft azl3 kernel 6.6.130.1-3

Patch available

Linux Linux kernel>=5.7.10<5.8

Linux Linux kernel>=5.8.1<6.1.168

Linux Linux kernel>=6.2<6.6.131

Linux Linux kernel>=6.7<6.12.80

Linux Linux kernel>=6.13<6.18.21

Linux Linux kernel>=6.19<6.19.11

Linux Linux kernel=5.8

Linux Linux kernel=5.8-rc6

Linux Linux kernel=5.8-rc7

Linux Linux kernel=7.0-rc1

Linux Linux kernel=7.0-rc2

Linux Linux kernel=7.0-rc3

Linux Linux kernel=7.0-rc4

Linux Linux kernel=7.0-rc5

Event History

Apr 22, 2026

CVE Published

via MITRE·01:53 PM

Data Sourced

via MITRE·01:53 PM

Description

Data Sourced

via NVD·02:16 PM

RemedyDescriptionSeverityWeaknessAffected Software

Apr 23, 2026

Data Sourced

via Microsoft·08:06 AM

DescriptionSeverityWeakness

Data Sourced

via Microsoft·08:06 AM

Affected Software

Updated

via Microsoft·08:06 AM

DescriptionSeverity

Frequently Asked Questions

What conditions are required to trigger this issue?

The issue occurs when an idxd workqueue is reset. The affected cleanup path can mark the workqueue as empty before its resources have actually been released, resulting in a memory leak.

Is this remotely exploitable?

The supplied CVSS vector identifies local access, low attack complexity, and low privileges as required, with no user interaction. It does not indicate a remote attack vector.

What is the practical impact?

The vulnerability affects availability: repeated triggering of the affected workqueue reset path can leak memory. The supplied CVSS vector indicates no confidentiality or integrity impact.

Which software is identified as affected?

The data identifies the Linux kernel and Microsoft azl3 kernel 6.6.130.1-3. The vulnerability has been resolved, but no fixed version is provided in the supplied data.

CVE-2026-31441: dmaengine: idxd: Fix memory leak when a wq is reset

Affected Software

Event History

Frequently Asked Questions

What conditions are required to trigger this issue?

Is this remotely exploitable?

What is the practical impact?

Which software is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What conditions are required to trigger this issue?

Is this remotely exploitable?

What is the practical impact?

Which software is identified as affected?