PT-2026-34391 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-05-26 · CVE-2026-31486

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Race conditions can occur in the hwmon (pmbus/core) component because the regulator operations pmbus regulator get voltage(), pmbus regulator set voltage(), and pmbus regulator list voltage() access PMBus registers and shared data without the protection of the update lock mutex.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2026-31486

OESA-2026-2312

OESA-2026-2313

OESA-2026-2314

Affected Products

Linux Kernel

References · 42

• https://nvd.nist.gov/vuln/detail/CVE-2026-31575 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2313 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43284 · Security Note
• https://git.kernel.org/stable/c/2c77ae315f3ce9d2c8e1609be74c9358c1fe4e07 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31504 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43018 · Security Note
• https://git.kernel.org/stable/c/754bd2b4a084b90b5e7b630e1f423061a9b9b761 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31486 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43429 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43013 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43265 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43019 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31486 · Security Note
• https://git.kernel.org/stable/c/4e9d723d9f198b86f6882a84c501ba1f39e8d055 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31436 · Security Note