PT-2026-36361 · Linux · Linux Kernel

Alan Stern · Published 2026-05-01 · Updated 2026-05-06 · CVE-2026-31726

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition in the USB gadget UVC (USB Video Class) component can lead to a NULL pointer dereference. During power management transitions, the wait event interruptible timeout() function may be aborted early when the system freezes user space processes. This allows the unbind thread to nullify the cdev->gadget pointer. When the system resumes or aborts the suspend process and tasks restart, the V4L2 release path attempts to access this nullified pointer via the uvc function disconnect() function, resulting in a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-31726

ECHO-601A-4090-0CA3

Affected Products

Linux Kernel

References · 18

• https://git.kernel.org/stable/c/c78e463ee134b4669579d453c81ae00795e4c19a · Patch
• https://cve.org/CVERecord?id=CVE-2026-31726 · Security Note
• https://git.kernel.org/stable/c/eba2936bbe6b752a31725a9eb5c674ecbf21ee7d · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-31726 · Vendor Advisory
• https://git.kernel.org/stable/c/0c00ec409d7b2bce3fcac73188b79a141db7cfda · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31726 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31726 · Vendor Advisory
• https://git.kernel.org/stable/c/8a1128d604c360eca135f15b882b70256a522145 · Patch
• https://git.kernel.org/stable/c/1aa9356881ee4ed414bf72d0c56d915492cb5345 · Patch
• https://git.kernel.org/stable/c/d92d1532e05b1b31d36d48765e43bf73d793d19f · Patch
• https://git.kernel.org/stable/c/0587de744615628c38e33ddc1601160a5ea8c50a · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31726 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-31726 · Vendor Advisory
• https://git.kernel.org/stable/c/c038ba56b92e410d1caec22b2dc68780a0b42091 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31726 · Security Note