PT-2026-36327 · Linux · Linux Kernel

Published 2026-05-01 · Updated 2026-05-16 · CVE-2026-31697

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the crypto CCP module when retrieving the CPU ID. If a firmware command fails, specifically due to an invalid length where the userspace buffer is too small, the system may still attempt to copy the ID blob to userspace. This results in a slab-out-of-bounds read, where the number of bytes required by the firmware overflows the kernel-allocated buffer, potentially leaking kernel data to userspace. The issue is triggered within the sev ioctl do get id2() function during the execution of sev ioctl.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-31697

ECHO-D52A-7E87-4B0F

OESA-2026-2311

OPENSUSE-SU-2026:10793-1

Affected Products

Linux Kernel

References · 82

• https://git.kernel.org/stable/c/1fbac0429a42adec830491757a2b53956dd797ea · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31592 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31523 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31441 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31682 · Security Note
• https://git.kernel.org/stable/c/2937f17bbeefb8e7608ff1f78cffbeb3d0281e5e · Patch
• https://ubuntu.com/security/CVE-2026-31697 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31674 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31667 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31504 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31630 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31697 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31560 · Security Note
• https://git.kernel.org/stable/c/09427bcb1715fb20a80b6acd5156dbf15ab5c363 · Patch
• https://cve.org/CVERecord?id=CVE-2026-31697 · Security Note