PT-2026-34413 · Linux+1 · Linux Kernel+1

CVE-2026-31508

·

Published

2026-04-22

·

Updated

2026-07-24

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the openvswitch component of the Linux kernel where a network device (netdev) may be released before the teardown process is fully completed. This occurs because the ovs netdev detach dev() function clears the IFF OVS DATAPATH flag before unregistration is finished. If the process is preempted after clearing this flag, specifically on -rt kernels, the netdev destroy() function can complete and free the device prematurely, leading to a general protection fault.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

ALSA-2026:25217
CVE-2026-31508
ECHO-1214-E789-4EF3
OESA-2026-2868
OESA-2026-2869
RHSA-2026:25028
RHSA-2026:25217
RHSA-2026:25218
USN-8567-1
USN-8574-1
USN-8574-2
USN-8575-1
USN-8575-2
USN-8575-3
USN-8576-1
USN-8576-2
USN-8595-1
USN-8595-2
USN-8596-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1
USN-8610-1

Affected Products

Linux Kernel
Rocky Linux