PT-2026-36363 · Linux · Linux Kernel

Published 2026-05-01 · Updated 2026-05-26 · CVE-2026-31728

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists between the gether disconnect() and eth stop() functions. If eth stop() is triggered concurrently while gether disconnect() is tearing down endpoints, eth stop() may attempt to access a cleared endpoint descriptor, resulting in a NULL pointer dereference. Since eth stop() crashes while holding the dev->lock, the thread executing gether disconnect() cannot acquire the lock and enters an infinite spin, leading to a hardlockup. The issue is caused by the delayed clearing of the dev->port usb variable in gether disconnect().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2026-31728

ECHO-6A42-9E03-F868

Affected Products

Linux Kernel

References · 18

• https://ubuntu.com/security/CVE-2026-31728 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2204-CVE-2026-31728 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31728 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31728 · Vendor Advisory
• https://git.kernel.org/stable/c/bbb09bb89ffa571475f66daca9482b974cd29d6a · Patch
• https://git.kernel.org/stable/c/e1eabb072c75681f78312c484ccfffb7430f206e · Patch
• https://cve.org/CVERecord?id=CVE-2026-31728 · Security Note
• https://git.kernel.org/stable/c/e1e7a66584bf0aff3becb73c19fa31527889fc9e · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31728 · Vendor Advisory
• https://git.kernel.org/stable/c/6ad77458637b78ec655e3da5f112c862e6690a9d · Patch
• https://git.kernel.org/stable/c/a259ba0bce3b192c04334499690372a250f7d0b1 · Patch
• https://git.kernel.org/stable/c/f02980594deef751e42133714aee25228f1494c6 · Patch
• https://git.kernel.org/stable/c/8ff689edfeceb5e3ec1623e09af2b2aa0f1098a8 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31728 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31728 · Vendor Advisory