PT-2026-31909 · Linux · Linux Kernel

Published 2026-04-10 · Updated 2026-05-20 · CVE-2026-31412

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the f mass storage gadget driver. The check command size in blocks() function does not validate for integer overflows when calculating data size in bytes by left-shifting common->data size from cmnd by the block size (common->curlun->blkbits). A malicious USB host sending a SCSI READ or WRITE command with a large data request (common->data size from cmnd) can cause a wrap-around during the left shift operation, resulting in a truncated data size. This can bypass boundary checks and potentially lead to memory corruption or out-of-bounds accesses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2026-31412

ECHO-1448-3CDB-ED55

Affected Products

Linux Kernel

References · 20

• https://git.kernel.org/stable/c/228b37936376143f4b60cc6828663f6eaceb81b5 · Patch
• https://cve.org/CVERecord?id=CVE-2026-31412 · Security Note
• https://git.kernel.org/stable/c/387ebb0453b99d71491419a5dc4ab4bee0cacbac · Patch
• https://git.kernel.org/stable/c/91817ad5452defe69bc7bc0e355f0ed5d01125cc · Patch
• https://ubuntu.com/security/CVE-2026-31412 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-31412 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31412 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-31412 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31412 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-31412 · Vendor Advisory
• https://git.kernel.org/stable/c/8479891d1f04a8ce55366fe4ca361ccdb96f02e1 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31412 · Vendor Advisory
• https://git.kernel.org/stable/c/3428dc5520c811e66622b2f5fa43341bf9a1f8b3 · Patch
• https://git.kernel.org/stable/c/ce0caaed5940162780c5c223b8ae54968a5f059b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31412 · Security Note