PT-2026-35138 · Linux · Linux Kernel

Published 2026-04-25 · Updated 2026-06-15 · CVE-2026-31678

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the Open vSwitch component of the Linux kernel. The ovs netdev tunnel destroy() function may execute after the NETDEV UNREGISTER process has already detached the device. Releasing the netdev reference during the destroy process can conflict with concurrent readers that still observe vport->dev.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

CVE-2026-31678

ECHO-78CB-C86F-9F8E

OESA-2026-2579

OESA-2026-2580

OESA-2026-2581

SUSE-SU-2026:22108-1

Affected Products

Linux Kernel

References · 399

• https://nvd.nist.gov/vuln/detail/CVE-2026-43043 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43336 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-46167 · Security Note
• https://git.kernel.org/stable/c/9d56aced21fb9c104e8a3f3be9b21fbafe448ffc · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-38602 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31496 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31430 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68340 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38644 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43037 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2579 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31755 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43158 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31570 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68789 · Security Note