PT-2026-36329 · Linux · Linux Kernel

Published 2026-05-01 · Updated 2026-05-16 · CVE-2026-31699

Positive Technologies (AI Summary)

CVSS v3.1

7.1

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the crypto CCP component when retrieving the PEK CSR. If a firmware command fails, specifically due to an invalid length where the userspace buffer is too small, the system may still attempt to copy the blob to userspace. This results in a slab-out-of-bounds read, where the number of bytes required by the firmware overflows the kernel-allocated buffer, potentially leaking sensitive kernel data to userspace. This occurs within the sev ioctl do pek csr() and sev ioctl() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-31699

ECHO-B14C-C5BD-2F32

OESA-2026-2311

OPENSUSE-SU-2026:10793-1

Affected Products

Linux Kernel

References · 82

• https://nvd.nist.gov/vuln/detail/CVE-2026-31592 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31523 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31441 · Security Note
• https://git.kernel.org/stable/c/3b4fd8f15765d9a3105b834dba8a05d025e5e16e · Patch
• https://git.kernel.org/stable/c/59e9ae81f8670ccc780bc75f45a355736f640ec9 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31674 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31667 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31504 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31630 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31560 · Security Note
• https://git.kernel.org/stable/c/111dcc6d0f016076745824a787d25609d0022f4c · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31699 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10793-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31699 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-43064 · Security Note