CVE-2026-31436

A flaw was found in the Linux kernel's dmaengine subsystem, specifically within the idxd driver. This vulnerability occurs due to incorrect descriptor completion in the llist_abort_desc() function. This can lead to issues such as NULL pointer dereferences, double completion, or descriptor leaks, which can result in a denial of service.

This issue affects Intel Data Streaming Accelerator (idxd) descriptor abort handling in the upstream kernel. A mistaken completion target can destabilize the device path and crash or hang the system under error recovery. Red Hat tracks the CVE against supported products and will ship the upstream fix through kernel errata. Scope is limited to systems with idxd hardware and the driver loaded.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the idxd module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.