PT-2026-34951 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-05-06 · CVE-2026-31599

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference exists in the vidtv channel pmt match sections() function. This occurs because vidtv psi pmt stream init() can return NULL during a memory allocation failure, which is not checked by vidtv channel pmt match sections(). Consequently, when the tail variable is NULL, a subsequent call to the vidtv psi desc assign() function dereferences a NULL pointer offset, leading to a general protection fault.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-31599

ECHO-088E-4027-21B6

OPENSUSE-SU-2026:10703-1

Affected Products

Linux Kernel

References · 77

• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31599 · Vendor Advisory
• https://git.kernel.org/stable/c/f8e1fc918a9fe67103bcda01d20d745f264d00a7 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31599 · Vendor Advisory
• https://git.kernel.org/stable/c/2dff11fb5098ae453651f8f77e94ad499c078022 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31599 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10703-1 · Vendor Advisory
• https://git.kernel.org/stable/c/b832cfd516b8504e95884622cee60bf9a39b7945 · Patch
• https://ubuntu.com/security/CVE-2026-31599 · Vendor Advisory
• https://git.kernel.org/stable/c/e589de36da106ef739ba98f66f5a5c2023370706 · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-31599 · Vendor Advisory
• https://git.kernel.org/stable/c/b7efb4c94797c504a1c678edb48c2aa311d3309f · Patch
• https://cve.org/CVERecord?id=CVE-2026-31599 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31599 · Vendor Advisory
• https://git.kernel.org/stable/c/07c1e474cf9acf777f09d14a8f8dfcef5b84e46f · Patch
• https://suse.com/security/cve/CVE-2026-31577 · Note