CVE-2026-43064: dmaengine: idxd: Fix not releasing workqueue on .release()
Published May 5, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Fix not releasing workqueue on .release()
The workqueue associated with an DSA/IAA device is not released when the object is freed.
Affected Software
13 affected components
Linux Linux kernel (dmaengine idxd)
Linux Linux kernel>=5.11.22<5.12
Linux Linux kernel>=5.12.5<5.13
Linux Linux kernel>=5.13<6.1.168
Linux Linux kernel>=6.2<6.6.131
Linux Linux kernel>=6.7<6.12.80
Linux Linux kernel>=6.13<6.18.21
Linux Linux kernel>=6.19<6.19.11
Linux Linux kernel=7.0-rc1
Linux Linux kernel=7.0-rc2
Linux Linux kernel=7.0-rc3
Linux Linux kernel=7.0-rc4
Linux Linux kernel=7.0-rc5
Event History
May 5, 2026
CVE Published
via MITRE·03:23 PM
Data Sourced
via MITRE·03:23 PM
Description
Data Sourced
via NVD·04:16 PM
RemedyDescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-43064?
CVE-2026-43064 is classified as a medium severity vulnerability in the Linux kernel.
2
How do I fix CVE-2026-43064?
To resolve CVE-2026-43064, upgrade to the patched version of the Linux kernel that addresses the workqueue release issue.
3
What systems are affected by CVE-2026-43064?
CVE-2026-43064 affects systems utilizing the dmaengine with idxd devices in the Linux kernel.
4
What does CVE-2026-43064 impact?
CVE-2026-43064 impacts the proper releasing of workqueues associated with DSA/IAA devices in the kernel.
5
When was CVE-2026-43064 disclosed?
CVE-2026-43064 was disclosed in the year 2026.