PT-2026-34433 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-04-22 · CVE-2026-31528

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bound memory access can occur in the x86 pmu del() function when group sched in() fails and requires a rollback. This happens because the inherit function uses event->pmu to clone events, which can lead to the use of incorrect PMU transaction handlers when the group leader is a software event. Additionally, the perf event read() function was found to require the use of pmu ctx->pmu for group cases to ensure consistency.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31528

Affected Products

Linux Kernel

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-31528 · Security Note
• https://git.kernel.org/stable/c/656f35b463995bee024d948440128230aacd81e1 · Note
• https://twitter.com/VulmonFeeds/status/2047019865471414345 · Twitter Post
• https://git.kernel.org/stable/c/35f7914e54fe7f13654c22ee045b05e4b6d8062b · Note
• https://git.kernel.org/stable/c/4b9ce671960627b2505b3f64742544ae9801df97 · Note
• https://git.kernel.org/stable/c/3a696e84a8b1fafdd774bb30d62919faf844d9e4 · Note
• https://twitter.com/CVEnew/status/2046979939354751156 · Twitter Post
• https://git.kernel.org/stable/c/4c759446046500a1a6785b25725725c3ff087ace · Note