PT-2026-34373 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-04-23 · CVE-2026-31468

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double free issue exists in the dma-buf feature of the vfio/pci component. The error path within the vfio pci core feature dma buf() function incorrectly triggers the entire unwind chain instead of only using dma buf put() after dma buf export(). In scenarios involving file descriptor exhaustion, this leads to an unbalanced refcount on the vfio device and the subsequent double free of allocated objects.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2026-31468

Affected Products

Linux Kernel

References · 10

• https://cve.org/CVERecord?id=CVE-2026-31468 · Security Note
• https://git.kernel.org/stable/c/e98137f0a874ab36d0946de4707aa48cb7137d1c · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31468 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31468 · Vendor Advisory
• https://git.kernel.org/stable/c/83ad334afc9a645cef1062f5346526b1e36d6516 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31468 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31468 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31468 · Vendor Advisory
• https://twitter.com/CVEnew/status/2046980017964343369 · Twitter Post
• https://git.kernel.org/linus/e98137f0a874ab36d0946de4707aa48cb7137d1c · Note