CVE-2026-74574

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the dmaengine: idxd component within the idxd cdev open() function. During file-device setup failure in the failed dev add and failed dev name paths, the system drops the file-device reference while the wq->wq lock is still held. If put device(fdev) drops the last reference, the idxd file dev release() function runs synchronously and attempts to acquire wq->wq lock again, resulting in a deadlock. Additionally, these paths may fall through to context cleanup labels, causing idxd xa pasid remove(ctx) and kfree(ctx) to operate on a context that has already been freed by idxd file dev release().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.