PT-2026-34433 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-06-05 · CVE-2026-31528

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bound memory access can occur in the x86 pmu del() function when group sched in() fails and requires a rollback. This happens because the inherit function uses event->pmu to clone events, which can lead to the use of incorrect PMU transaction handlers when the group leader is a software event. Additionally, the perf event read() function was found to require the use of pmu ctx->pmu for group cases to ensure consistency.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-31528

OESA-2026-2581

Affected Products

Linux Kernel

References · 118

• https://nvd.nist.gov/vuln/detail/CVE-2025-23145 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31398 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31698 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23473 · Security Note
• https://git.kernel.org/stable/c/35f7914e54fe7f13654c22ee045b05e4b6d8062b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-71239 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31628 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31467 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23102 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31532 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-71094 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43148 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31518 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31452 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31496 · Security Note