PT-2026-34428 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-05-26 · CVE-2026-31523

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the nvme-pci component. When a user changes the polled queue count at run time, a brief window during a reset may allow a hipri task to poll a queue before the block layer updates the queue maps. This can lead to a conflict with the interrupt driven queue, potentially resulting in double completions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2026-31523

ECHO-7559-874F-158A

OESA-2026-2311

Affected Products

Linux Kernel

References · 52

• https://nvd.nist.gov/vuln/detail/CVE-2026-43124 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43284 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31773 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31504 · Security Note
• https://git.kernel.org/stable/c/b96c7b25eb1b748f3e3b1832ebf028b0b223d7e3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-43020 · Security Note
• https://git.kernel.org/stable/c/0685dd9cb855ab77fcf3577b4702ba1d6df1c98d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31523 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31404 · Security Note
• https://git.kernel.org/stable/c/acbc72dd1a09df53cafcf577259f4678be6afd6d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31476 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31667 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31523 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31630 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-31523 · Security Note