PT-2026-34946 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-05-06 · CVE-2026-31594

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A duplicate resource teardown occurs in the PCI endpoint pci-epf-vntb. The function epf ntb epc destroy() performs a teardown that the caller is already expected to execute. This redundancy can lead to a kernel oops, which is a type of kernel panic or error, specifically when .allow link fails or when .drop link is performed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31594

ECHO-77B3-B55C-D297

OPENSUSE-SU-2026:10703-1

Affected Products

Linux Kernel

References · 77

• https://git.kernel.org/stable/c/73bf218de28d039126dc64281d2b47dd3c46a0a3 · Patch
• https://ubuntu.com/security/CVE-2026-31594 · Vendor Advisory
• https://git.kernel.org/stable/c/a7a3cab4d33fd8a8aed864c447d0d7c99e85404e · Patch
• https://osv.dev/vulnerability/openSUSE-SU-2026:10703-1 · Vendor Advisory
• https://git.kernel.org/stable/c/e238ab12556b00f3b4d8b870b32ba1e4f4d4ebc2 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31594 · Security Note
• https://git.kernel.org/stable/c/0da63230d3ec1ec5fcc443a2314233e95bfece54 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31594 · Vendor Advisory
• https://git.kernel.org/stable/c/cec9ead73ab154a7953f6ab8dd5127e0d6bbf95a · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31594 · Vendor Advisory
• https://git.kernel.org/stable/c/478e776101592eb63298714e96823ef78a3295ec · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31594 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31594 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31594 · Security Note
• https://suse.com/security/cve/CVE-2026-31577 · Note