PT-2026-34348 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-05-07 · CVE-2026-31443

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A crash occurs in the dmaengine idxd driver when the event log is disabled. If the hardware does not support reporting errors to the event log and an error triggering a Function Level Reset (FLR) is received, the driver attempts to restore the event log despite it not being allocated. Additionally, the driver may attempt to free the event log without proper allocation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31443

Affected Products

Linux Kernel

References · 13

• https://security-tracker.debian.org/tracker/CVE-2026-31443 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31443 · Security Note
• https://ubuntu.com/security/CVE-2026-31443 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31443 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31443 · Vendor Advisory
• https://git.kernel.org/stable/c/52d2edea0d63c935e82631e4b9e4a94eccf97b5b · Patch
• https://git.kernel.org/stable/c/aa0ffc6d3990ec35976308a068dc23178037e564 · Patch
• https://git.kernel.org/stable/c/0e761079d653c25f838380cf7cef2730832110cc · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31443 · Security Note
• https://twitter.com/CVEnew/status/2046980049560100935 · Twitter Post
• https://t.me/cveNotify/162623 · Telegram Post
• https://git.kernel.org/linus/52d2edea0d63c935e82631e4b9e4a94eccf97b5b · Note
• https://twitter.com/infoflowcloud/status/2046981999705895360 · Twitter Post