Linux Kernel Vulnerability in DMA Engine Affecting Multiple Versions

CVE-2026-74574

What is CVE-2026-74574?

In the Linux kernel, a vulnerability exists within the DMA engine that can lead to a deadlock condition during the device setup process in idxd_cdev_open(). This is caused by the mishandling of file-device references when the device setup fails, which drops references while holding essential locks. As a result, conflicts may occur during cleanup operations, leading to potential resource leaks and instability. The issue has been addressed by restructuring the order of operations to ensure proper lock management and reference handling.

References