PT-2026-34923 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-04-28 · CVE-2026-31571

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the drm/i915 component where the unlink nv12 plane() function can overwrite parts of the plane state that were already established by plane atomic check(). This occurs when a plane previously designated as a Y plane is reconfigured as a normal plane by user space. In this scenario, plane atomic check() computes the plane state based on the user request, but unlink nv12 plane() subsequently clears portions of that state, leading to a state corruption and a system warning.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31571

Affected Products

Linux Kernel

References · 11

• https://security-tracker.debian.org/tracker/CVE-2026-31571 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31571 · Vendor Advisory
• https://git.kernel.org/stable/c/bfa71b7a9dc6b5b8af157686e03308291141d00c · Patch
• https://git.kernel.org/stable/c/70e2eb91cb6310a3508439f6f2539dfffa0abf77 · Patch
• https://git.kernel.org/stable/c/12f3b6cbab8fbeb95097685b40f0147406cf9746 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31571 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31571 · Security Note
• https://ubuntu.com/security/CVE-2026-31571 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31571 · Security Note
• https://twitter.com/CVEnew/status/2047798614932799874 · Twitter Post
• https://git.kernel.org/linus/bfa71b7a9dc6b5b8af157686e03308291141d00c · Note