PT-2026-34431 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-04-22 · CVE-2026-31526

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the process bpf exit full() function where check lock is set to !curframe when calling check resource leak(). In cases where bpf throw() is called from a static subprog, this value becomes false, causing the system to skip the validation of active rcu locks, active preempt locks, and active irq id during exception exits from subprogs. Consequently, bpf throw() unwinds the stack via ORC without releasing user-acquired locks, which can lead to various system issues.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31526

Affected Products

Linux Kernel

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-31526 · Security Note
• https://twitter.com/CVEnew/status/2046979941938364451 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2047030104803483896 · Twitter Post
• https://git.kernel.org/stable/c/6c2128505f61b504c79a20b89596feba61388112 · Note
• https://git.kernel.org/stable/c/5a399f3117642494e35545f6ca397d3e177c1f9b · Note
• https://git.kernel.org/stable/c/c0281da1f2aa5c2fca3a05f79b86bea96591c358 · Note