PT-2026-34942 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-05-09 · CVE-2026-31590

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the KVM SEV component where the sev pin memory() function triggers a warning when the number of pages overflows an integer. This can be easily triggered from userspace by calling the 'KVM MEMORY ENCRYPT REG REGION' endpoint with a large value in the size variable. Additionally, checks in sev mem enc register region() regarding the addr and size variables are ineffective because they are defined as u64s in a 64-bit environment.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31590

ECHO-49EE-3BB9-AF98

OESA-2026-2234

OPENSUSE-SU-2026:10703-1

Affected Products

Linux Kernel

References · 88

• https://git.kernel.org/stable/c/8acffeef5ef720c35e513e322ab08e32683f32f2 · Patch
• https://osv.dev/vulnerability/OESA-2026-2234 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31449 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10703-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-31590 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31680 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31450 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31590 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31602 · Security Note
• https://git.kernel.org/stable/c/28cc13ca20431b127d42d84ba10898d03e2c8267 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31677 · Security Note
• https://ubuntu.com/security/CVE-2026-31590 · Vendor Advisory
• https://git.kernel.org/stable/c/c29ff288a2d97a6f4640a498a367cf0eb91312eb · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31590 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31590 · Vendor Advisory