CVE-2026-31647

A flaw was found in the Linux kernel's idpf driver. This vulnerability arises from improper nesting of spinlocks during asynchronous Virtual Channel (VC) handling. An attacker could potentially trigger an invalid wait context, leading to a system crash or denial of service.

Moderate: This flaw in the Linux kernel's idpf driver, which supports Intel Ethernet devices, could result in a denial of service. A local attacker could exploit improper spinlock nesting during asynchronous Virtual Channel handling to induce an invalid wait context, causing a system crash on affected Red Hat Enterprise Linux systems.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To reduce exposure, prevent the idpf kernel module from loading. Create a file /etc/modprobe.d/blacklist-idpf.conf with blacklist idpf. Regenerate the initramfs using dracut -f -v and reboot the system for the changes to take effect. This action may impact functionality dependent on the idpf driver.