VDB
CVE-2026-31436
CVE-2026-31436
PUBLISHED
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() At the end of this function, d is the traversal cursor of flist, but the code completes found instead. This can lead to issues such as NULL pointer dereferences, double completion, or descriptor leaks. Fix this by completing d instead of found in the final list_for_each_entry_safe() loop.
EPSS 0.07% · 20.5th percentile
Risk Scores
EPSS Score
0.07%
20.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| linux | linux_kernel | 6.8, 6.8, 6.8 |
| Linux | Linux | aa8d18becc0c14aa3eb46d6d1b81450446e11b87, aa8d18becc0c14aa3eb46d6d1b81450446e11b87, aa8d18becc0c14aa3eb46d6d1b81450446e11b87 |
Timeline
- Apr 22, 2026 CVE Published
- Apr 23, 2026 Security Advisory
- Apr 27, 2026 CVE Updated
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score
- May 22, 2026 EPSS Score
- May 23, 2026 EPSS Score
- May 24, 2026 EPSS Score
- May 25, 2026 EPSS Score
- May 26, 2026 EPSS Score
References
- https://git.kernel.org/stable/c/e21da2ad8844585040fe4b82be1ad2fe99d40074 url
- https://git.kernel.org/stable/c/82656e8daf8de00935ae91b91bed43f4d6e0d644 url
- https://git.kernel.org/stable/c/0e4f43779d550e559be13a5cdb763bad92c4cc99 url
- https://git.kernel.org/stable/c/e1c9866173c5f8521f2d0768547a01508cb9ff27 url
- https://nvd.nist.gov/vuln/detail/CVE-2026-31436 advisory
- https://lists.debian.org/debian-security-announce/2026/msg00154.html advisory
- https://lists.debian.org/debian-security-announce/2026/msg00148.html advisory
- https://www.suse.com/support/update/announcement/2026/suse-su-202621930-1 advisory
- https://www.suse.com/support/update/announcement/2026/suse-su-202621841-1 advisory
- https://www.suse.com/support/update/announcement/2026/suse-su-20262238-1 advisory
- https://www.suse.com/support/update/announcement/2026/suse-su-202621974-1 advisory
- https://www.suse.com/support/update/announcement/2026/suse-su-20262217-1 advisory
- https://www.suse.com/support/update/announcement/2026/suse-su-202621979-1 advisory
- https://www.suse.com/support/update/announcement/2026/suse-su-20262149-1 advisory
- https://www.suse.com/support/update/announcement/2026/suse-su-20262158-1 advisory
- https://www.suse.com/support/update/announcement/2026/suse-su-202621973-1 advisory
- https://www.suse.com/support/update/announcement/2026/suse-su-20262189-1 advisory
- https://www.suse.com/support/update/announcement/2026/suse-su-20262159-1 advisory
- https://www.suse.com/support/update/announcement/2026/suse-su-202621942-1 advisory
- https://www.suse.com/support/update/announcement/2026/suse-su-202621964-1 advisory
…and 50 more