CVE-2026-31436
critical · 9.8In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() At the end of this function, d is the traversal cursor of flist, but the code completes found instead. This can lead to issues such as NULL pointer dereferences, double completion, or descriptor leaks. Fix this by completing d instead of found in the final list_for_each_entry_safe() loop.
9.8
CVSS
0.5%
EPSS (exploit prob.)
39th
EPSS percentile
2026-04-22
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-476
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| linux | linux_kernel | >= 6.8, < 6.12.80 |
| linux | linux_kernel | >= 6.13, < 6.18.21 |
| linux | linux_kernel | >= 6.19, < 6.19.11 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
| linux | linux_kernel | 7.0 |
Check a specific version with /api/v1/cve/match.
References
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2026-31436