Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() At the end of this function, d is the traversal cursor of flist, but the code completes found instead. This can lead to issues such as NULL pointer dereferences, double completion, or descriptor leaks. Fix this by completing d instead of found in the final list_for_each_entry_safe() loop.

INFO

Published Date :

2026-04-22T13:53:35.693Z

Last Modified :

2026-04-22T13:53:35.693Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2026-31436 vulnerability.

Vendors Products
Linux
  • Linux Kernel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-31436.

URL Resource
https://git.kernel.org/stable/c/0e4f43779d550e559be13a5cdb763bad92c4cc99 cve-icon cve-icon
https://git.kernel.org/stable/c/82656e8daf8de00935ae91b91bed43f4d6e0d644 cve-icon cve-icon
https://git.kernel.org/stable/c/e1c9866173c5f8521f2d0768547a01508cb9ff27 cve-icon cve-icon
https://git.kernel.org/stable/c/e21da2ad8844585040fe4b82be1ad2fe99d40074 cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2026042242-CVE-2026-31436-7ac7@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-31436 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-31436 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact