CVE-2026-31443

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-04-22 Modified: 2026-11-11 First seen: 2026-11-05 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix crash when the event log is disabled If reporting errors to the event log is not supported by the hardware, and an error that causes Function Level Reset (FLR) is received, the driver will try to restore the event log even if it was not allocated. Also, only try to free the event log if it was properly allocated.

Affected Software (10)

VendorProductVersion
Linux Linux 6078a315aec15e0776fa90347cf4eba7478cdbd7 < aa0ffc6d3990ec35976308a068dc23178037e564
Linux Linux 6078a315aec15e0776fa90347cf4eba7478cdbd7 < 0e761079d653c25f838380cf7cef2730832110cc
Linux Linux 6078a315aec15e0776fa90347cf4eba7478cdbd7 < 52d2edea0d63c935e82631e4b9e4a94eccf97b5b
Linux Linux 6.14
linux linux_kernel 6.14 – 6.18.21
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.12%
Raw Score 0.001210
Percentile 1.9%
Date 2026-11-14

EPSS Trend

2026-11-14
0.00121
2026-11-13
0.00121
2026-11-12
0.00121
2026-11-10
0.00121
2026-11-09
0.00121
2026-11-08
0.00121
2026-11-07
0.00121
2026-11-06
0.00121
2026-11-05
0.00121

Intelligence Sources

mitre ref →
nvd ref →