CVE-2026-31440 Details
Description
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix leaking event log memory During the device remove process, the device is reset, causing the configuration registers to go back to their default state, which is zero. As the driver is checking if the event log support was enabled before deallocating, it will fail if a reset happened before. Do not check if the support was enabled, the check for 'idxd->evl' being valid (only allocated if the HW capability is available) is enough.
A vulnerability in the Linux kernel's DMA engine component for Intel's Integrated Accelerator (IDX) can lead to a memory leak in the event log during the device removal process. When a device is removed, it is reset, and its configuration registers return to default values. This reset can occur before the driver has a chance to properly deallocate memory for the event log, especially if the event log support was not enabled. The vulnerability arises because the driver incorrectly checks for event log support instead of verifying if the event log pointer is valid, which is only allocated when the hardware capability is available.
The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version where this issue has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/695b491dc3f20365fd5821f22e25dbe3c1c20cbc | kernel.org | |
| https://git.kernel.org/stable/c/9dfa00967e6ef43a9dd0887fe5c3a721a39da92e | kernel.org | Patch |
| https://git.kernel.org/stable/c/d94f9b0ba28a205caf95902ee88b42bdb8af83d0 | kernel.org | Patch |
| https://git.kernel.org/stable/c/ee66bc29578391c9b48523dc9119af67bd5c7c0f | kernel.org | Patch |
| https://git.kernel.org/stable/c/facd0012708e942fc12890708738aebde497564e | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-401 | Missing Release of Memory after Effective Lifetime | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.4, < 6.12.80 >= 6.13, < 6.18.21 >= 6.19, < 6.19.11 7.0 rc1 7.0 rc2 7.0 rc3 7.0 rc4 7.0 rc5 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 17, 2026 | CVE Modified | kernel.org |
| May 7, 2026 | Initial Analysis | [email protected] |
| Apr 22, 2026 | New CVE Received | kernel.org |