PT-2026-34387 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-04-28 · CVE-2026-31482

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the s390 architecture where the r12 register is not properly cleared during kernel entry. Previously, entry handlers loaded r12 with the current task pointer for use by branch prediction macros. After the removal of TIF ISOLATE BP, the load operation was removed, but the register was not added to the clearing sequence, leading to inconsistent register scrubbing across entry points.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31482

Affected Products

Linux Kernel

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2026-31482 · Security Note
• https://git.kernel.org/stable/c/95c899cd791803a5bf7b73e5994fbbe1cc1a9c36 · Patch
• https://git.kernel.org/stable/c/a58d298a83a3a9b7ca99ded9d60a1e77231159ef · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-31482 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31482 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31482 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-31482 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31482 · Security Note
• https://git.kernel.org/stable/c/7f4e3233faa8470dd0627bc49b2809f2bfebd909 · Patch
• https://git.kernel.org/stable/c/99a8b420f3f0e162eb9c9c9253929d4d23f9bd30 · Patch
• https://git.kernel.org/stable/c/0738d395aab8fae3b5a3ad3fc640630c91693c27 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31482 · Vendor Advisory
• https://t.me/cveNotify/161246 · Telegram Post
• https://docs.bell-sw.com/security/cves/CVE-2026-31482 · Note
• https://git.kernel.org/linus/0738d395aab8fae3b5a3ad3fc640630c91693c27 · Note