CVE-2026-43064: Linux Kernel

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: dmaengine: idxd: Fix not releasing workqueue on .release() The workqueue associated with an DSA/IAA device is not released when the object is freed.

Affected products

• Linux Linux Kernel: from 5.11.22, before 5.12 (fixed in 5.12); from 5.12.5, before 5.13 (fixed in 5.13); from 5.13, before 6.1.168 (fixed in 6.1.168); from 6.2, before 6.6.131 (fixed in 6.6.131); from 6.7, before 6.12.80 (fixed in 6.12.80); from 6.13, before 6.18.21 (fixed in 6.18.21); …

Published 2026-05-05. Last modified 2026-06-19.