Back to CVE records
Medium 5.5Published May 5, 2026
CVE-2026-43064In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix not releasing workqueue on .release() The workqueue associated with an DSA/IAA device is not released when the…
Updated under an hour ago ()
Does this affect you?
It affects linux_kernel. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix not releasing workqueue on .release() The workqueue associated with an DSA/IAA device is not released when the object is freed.
- CVSS
- 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Not given
- NVD analysis
- Modified
- Record last updated
- Jun 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
linux linux_kernel linux:linux_kernel | from 5.11.22 before 5.12; from 5.12.5 before 5.13; from 5.13 before 6.1.168; from 6.2 before 6.6.131; from 6.7 before 6.12.80; from 6.13 before 6.18.21; from 6.19 before 6.19.11; 7.0; and 4 more ranges | NVD |
References
- https://git.kernel.org/stable/c/2bb9e9e93adff9cc8a138ae9a3a8d59b3452272epatch
- https://git.kernel.org/stable/c/3d33de353b1ff9023d5ec73b9becf80ea87af695patch
- https://git.kernel.org/stable/c/70ae35be58d476e2fd9f7a941a5e03b2f5fadb8d
- https://git.kernel.org/stable/c/958e96533ddbd1edd127feb7624a7eed0cc379dcpatch
- https://git.kernel.org/stable/c/b22fd53b2ceb35445475f0edab13a908c5fb8433
- https://git.kernel.org/stable/c/d02c24af126dee45247dc7890409c86d1831859dpatch
- https://git.kernel.org/stable/c/fc34f199eb576b3a73089452fdf0056cc9a9301dpatch
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.