PT-2026-34907 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-05-15 · CVE-2026-31555

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the futex subsystem where the futex lock pi() retry path fails to clear a stale exiting pointer. When futex lock pi atomic() detects that an owner is exiting, it returns -EBUSY and stores a refcounted task pointer in the exiting variable. After wait for owner exiting() consumes this reference, the local pointer is not reset to nil. If a subsequent retry occurs and futex lock pi atomic() returns a different error, such as -EAGAIN, the stale pointer is passed to wait for owner exiting(), potentially leading to a kernel warning.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31555

ECHO-00EA-D22C-70C9

OESA-2026-2311

Affected Products

Linux Kernel

References · 50

• https://nvd.nist.gov/vuln/detail/CVE-2026-31699 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31592 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31523 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31441 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-31555 · Vendor Advisory
• https://git.kernel.org/stable/c/5e8e06bf8909e79b4acd950cf578cfc2f10bbefa · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31476 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31674 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31667 · Security Note
• https://git.kernel.org/stable/c/71112e62807d1925dc3ae6188b11f8cfc85aec23 · Patch
• https://git.kernel.org/stable/c/7475dfad10a05a5bfadebf5f2499bd61b19ed293 · Patch
• https://osv.dev/vulnerability/OESA-2026-2311 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31787 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31773 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31630 · Security Note