PT-2026-36365 · Linux · Linux Kernel

CVE-2026-31730 · Published 2026-05-01 · Updated 2026-07-23

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A double-free issue exists in the fastrpc component. The function fastrpc init create static process() may free the cctx->remote heap variable on the err map path without clearing the pointer. Subsequently, if the INIT CREATE STATIC ioctl hits the error path and the rpmsg device is removed or unbound, the fastrpc rpmsg remove() function frees cctx->remote heap again because the pointer is still non-NULL.

Recommendations Clear the cctx->remote heap pointer immediately after freeing it in the error path to prevent subsequent cleanup functions from attempting to free the same memory again.

Exploit

Fix

Double Free

Weakness Enumeration

CWE-415

Related Identifiers

CVE-2026-31730

SUSE-SU-2026:3130-1

SUSE-SU-2026:3166-1

USN-8567-1

USN-8574-1

USN-8574-2

USN-8595-1

USN-8596-1

Affected Products

Linux Kernel

References · 1997

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31730.json · Exploit
• https://ubuntu.com/security/CVE-2026-31415 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46003 · Vendor Advisory
• https://git.kernel.org/stable/c/3a164f640953cc982804746e772d379171aff5c6 · Patch
• https://ubuntu.com/security/CVE-2026-46016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45958 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52969 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31605 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31474 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45834 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43085 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31430 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23317 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31551 · Vendor Advisory