PT-2026-34958 · Linux · Linux Kernel

Published 2026-04-24 · Updated 2026-05-06 · CVE-2026-31606

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the usb gadget f hid component where cdev init is called while the cdev is still in use. This occurs during an unbind and subsequent bind sequence if the '/dev/hidg*' device remains open, leading to unsafe behavior such as kernel oops (system crashes caused by kernel errors).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31606

ECHO-8DCB-0D02-A0E4

OPENSUSE-SU-2026:10703-1

Affected Products

Linux Kernel

References · 77

• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31606 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31606 · Vendor Advisory
• https://git.kernel.org/stable/c/eb6ef6185f2054a341ec70d7e2165f5381744215 · Patch
• https://git.kernel.org/stable/c/c6c0d13db5d0f8d465eabc14bd23d2b6a7247a43 · Patch
• https://git.kernel.org/stable/c/5a229016ca3ac551294ec59770be9da94ec4bf63 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31606 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31606 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10703-1 · Vendor Advisory
• https://git.kernel.org/stable/c/75ecc46828ec377dd5692c677168ef6d64fd7123 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31606 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31606 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-31606 · Security Note
• https://git.kernel.org/stable/c/81ebd43cc0d6d106ce7b6ccbf7b5e40ca7f5503d · Patch
• https://suse.com/security/cve/CVE-2026-31627 · Note
• https://suse.com/security/cve/CVE-2026-31588 · Note