PT-2026-35493 · Linux · Linux Kernel

Published 2026-04-27 · Updated 2026-05-06 · CVE-2026-31687

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A deadlock condition exists in the GPIO OMAP driver. The omap mpuio driver was being registered within the omap gpio probe() function. Because the driver core prohibits registering drivers while a device lock is already held, this sequence can lead to a system deadlock. Additionally, the omap mpuio driver was not being unregistered when the module was unloaded.

Recommendations Register the omap mpuio driver from the module initcall and ensure it is unregistered in module exit().

Fix

Improper Locking

Weakness Enumeration

CWE-667

Related Identifiers

CVE-2026-31687

Affected Products

Linux Kernel

References · 23

• https://git.kernel.org/stable/c/32f08c3ddd6dda6cbb6c9d715de10f21dccde50f · Patch
• https://git.kernel.org/stable/c/57bcd3feffa79544c73a1a1872472389a391cc79 · Patch
• https://cve.org/CVERecord?id=CVE-2026-31687 · Security Note
• https://git.kernel.org/stable/c/86588916e1887a5edb8a9161cd7ae81e47a7ed25 · Patch
• https://git.kernel.org/stable/c/1c04c3a4de8d4bcb9202f94c44f26c57c2572308 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31687 · Vendor Advisory
• https://git.kernel.org/stable/c/a29215961d833f4de33a09c3964d31ebc6083033 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31687 · Vendor Advisory
• https://git.kernel.org/stable/c/2211d77892913804d16c28c7415b82804ab1e54c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31687 · Security Note
• https://git.kernel.org/stable/c/53a76425e0764421ba93bb9045d2e454667d5687 · Patch
• https://ubuntu.com/security/CVE-2026-31687 · Vendor Advisory
• https://git.kernel.org/stable/c/03db4dc9ad6eb91e640b517e00373ce877682854 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31687 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31687 · Vendor Advisory