PT-2026-34413 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-04-30 · CVE-2026-31508

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the openvswitch component of the Linux kernel where a network device (netdev) may be released before the teardown process is fully completed. This occurs because the ovs netdev detach dev() function clears the IFF OVS DATAPATH flag before unregistration is finished. If the process is preempted after clearing this flag, specifically on -rt kernels, the netdev destroy() function can complete and free the device prematurely, leading to a general protection fault.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31508

ECHO-1214-E789-4EF3

Affected Products

Linux Kernel

References · 19

• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31508 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31508 · Security Note
• https://git.kernel.org/stable/c/df3c95be76103604e752131d9495a24814915ece · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31508 · Vendor Advisory
• https://git.kernel.org/stable/c/7c770dadfda5cbbde6aa3c4363ed513f1d212bf8 · Patch
• https://ubuntu.com/security/CVE-2026-31508 · Vendor Advisory
• https://git.kernel.org/stable/c/5fdeaf591a0942772c2d18ff3563697a49ad01c6 · Patch
• https://git.kernel.org/stable/c/43579baa17270aa51f93eb09b6e4af6e047b7f6e · Patch
• https://git.kernel.org/stable/c/95265232b49765a4d00f4d028c100bb7185600f4 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-31508 · Vendor Advisory
• https://git.kernel.org/stable/c/755a6300afbd743cda4b102f24f343380ec0e0ff · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31508 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31508 · Security Note
• https://git.kernel.org/stable/c/4c3e25a7b711a402fcbbbcfbbdf2868ece1ae7c8 · Patch
• https://git.kernel.org/stable/c/33609454be4f582e686a4bf13d4482a5ca0f6c4b · Patch