PT-2026-34934 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-05-06 · CVE-2026-31582

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the hwmon powerz component during USB disconnection. When powerz disconnect() frees the URB (USB Request Block) and releases the mutex, a subsequent call to powerz read() can acquire the mutex and trigger powerz read data(), which then dereferences the freed URB pointer.

Recommendations Set priv->urb to NULL in powerz disconnect() to allow powerz read data() to detect the disconnected state. Add a !priv->urb check at the beginning of powerz read data() to return -ENODEV for disconnected devices. Move usb set intfdata() before hwmon registration to ensure the disconnect handler can always locate the priv pointer.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2026-31582

OPENSUSE-SU-2026:10703-1

Affected Products

Linux Kernel

References · 77

• https://git.kernel.org/stable/c/7003ae4810ca83f0ddca85b768500e313c4b998c · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31582 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10703-1 · Vendor Advisory
• https://git.kernel.org/stable/c/08e57f5e1a9067d5fbf33993aa7f51d60b3d13a4 · Patch
• https://cve.org/CVERecord?id=CVE-2026-31582 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-31582 · Vendor Advisory
• https://git.kernel.org/stable/c/61f2aa23b0ce8d7aa5071ed25a7471e246a4fdd4 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31582 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-31582 · Vendor Advisory
• https://git.kernel.org/stable/c/9e1b798257f96d2e2a2639830eb71add545ce749 · Patch
• https://ubuntu.com/security/CVE-2026-31582 · Vendor Advisory
• https://git.kernel.org/stable/c/c78e1d4e48f23792adaa7c94251e22b0d9700a39 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31582 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-31577 · Note
• https://suse.com/security/cve/CVE-2026-31587 · Note