CVE-2026-43064

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-05-05 Modified: 2026-11-11 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix not releasing workqueue on .release() The workqueue associated with an DSA/IAA device is not released when the object is freed.

Affected Software (18)

VendorProductVersion
Linux Linux 47c16ac27d4cb664cee53ee0b9b7e2f907923fb3 < 70ae35be58d476e2fd9f7a941a5e03b2f5fadb8d
Linux Linux 47c16ac27d4cb664cee53ee0b9b7e2f907923fb3 < b22fd53b2ceb35445475f0edab13a908c5fb8433
Linux Linux 47c16ac27d4cb664cee53ee0b9b7e2f907923fb3 < 2bb9e9e93adff9cc8a138ae9a3a8d59b3452272e
Linux Linux 47c16ac27d4cb664cee53ee0b9b7e2f907923fb3 < d02c24af126dee45247dc7890409c86d1831859d
Linux Linux 47c16ac27d4cb664cee53ee0b9b7e2f907923fb3 < 958e96533ddbd1edd127feb7624a7eed0cc379dc
Linux Linux 47c16ac27d4cb664cee53ee0b9b7e2f907923fb3 < fc34f199eb576b3a73089452fdf0056cc9a9301d
Linux Linux 47c16ac27d4cb664cee53ee0b9b7e2f907923fb3 < 3d33de353b1ff9023d5ec73b9becf80ea87af695
Linux Linux 3f0e87eb9680975184e98aed0e8866b4442a31f6
Linux Linux a13e4cf29da68630a116c1309072a265ade9566d
Linux Linux 5.11.22 < 5.12
Linux Linux 5.12.5 < 5.13
Linux Linux 5.13
linux linux_kernel 5.11.22 – 5.12
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0
linux linux_kernel 7.0

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.11%
Raw Score 0.001140
Percentile 1.5%
Date 2026-11-13

EPSS Trend

2026-11-13
0.00114
2026-11-12
0.00114
2026-11-10
0.00114
2026-11-09
0.00114
2026-11-08
0.00114
2026-11-07
0.00114
2026-11-06
0.00114

Intelligence Sources

mitre ref →
nvd ref →