PT-2026-36377 · Linux+2 · Linux+91

Published 2026-05-01 · Updated 2026-05-23 · CVE-2026-31742

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the virtual terminal (vt) component where the kernel fails to discard a stale unicode buffer upon exiting the alternate screen after a console resize. When enter alt screen() saves vc uni lines into vc saved uni lines and sets vc uni lines to NULL, a subsequent resize via vc do resize() skips reallocating the unicode buffer. Consequently, when leave alt screen() restores vc saved uni lines, the buffer dimensions do not match the current vc rows and vc cols. Operations that iterate over the unicode buffer using current dimensions, such as the csi J function for clearing the screen, can access memory out of bounds, leading to a kernel oops.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-31742

Affected Products

Linux

Linux-Allwinner-5.19

Linux-Aws-5.0

Linux-Aws-5.11

Linux-Aws-5.13

Linux-Aws-5.19

Linux-Aws-5.3

Linux-Aws-5.8

Linux-Aws-6.14

Linux-Aws-6.2

Linux-Aws-6.5

Linux-Azure

Linux-Azure-5.11

Linux-Azure-5.13

Linux-Azure-5.19

Linux-Azure-5.3

Linux-Azure-5.8

Linux-Azure-6.11

Linux-Azure-6.2

Linux-Azure-6.5

Linux-Azure-Edge

Linux-Azure-Fde

Linux-Azure-Fde-5.19

Linux-Azure-Fde-6.2

Linux-Gcp

Linux-Gcp-5.11

Linux-Gcp-5.13

Linux-Gcp-5.19

Linux-Gcp-5.3

Linux-Gcp-5.8

Linux-Gcp-6.11

Linux-Gcp-6.14

Linux-Gcp-6.2

Linux-Gcp-6.5

Linux-Gke

Linux-Gke-4.15

Linux-Gkeop-5.15

Linux-Gke-5.4

Linux-Gkeop

Linux-Hwe

Linux-Hwe-5.11

Linux-Hwe-5.13

Linux-Hwe-5.19

Linux-Hwe-5.8

Linux-Hwe-6.11

Linux-Hwe-6.14

Linux-Hwe-6.2

Linux-Hwe-6.5

Linux-Hwe-Edge

Linux-Intel-5.13

Linux-Intel-Iot-Realtime

Linux-Lowlatency-Hwe-5.19

Linux-Lowlatency-Hwe-6.11

Linux-Lowlatency-Hwe-6.2

Linux-Lowlatency-Hwe-6.5

Linux-Nvidia

Linux-Nvidia-6.11

Linux-Nvidia-6.2

Linux-Nvidia-6.5

Linux-Oem

Linux-Oem-5.10

Linux-Oem-5.13

Linux-Oem-5.14

Linux-Oem-5.17

Linux-Oem-5.6

Linux-Oem-6.0

Linux-Oem-6.1

Linux-Oem-6.11

Linux-Oem-6.14

Linux-Oem-6.5

Linux-Oem-6.8

Linux-Oracle-5.0

Linux-Oracle-5.11

Linux-Oracle-5.13

Linux-Oracle-5.3

Linux-Oracle-5.8

Linux-Oracle-6.14

Linux-Oracle-6.5

Linux-Raspi-Realtime

Linux-Raspi2

Linux-Realtime

Linux-Realtime-6.14

Linux-Riscv

Linux-Riscv-5.11

Linux-Riscv-5.19

Linux-Riscv-5.8

Linux-Riscv-6.14

Linux-Riscv-6.5

Linux-Starfive-5.19

Linux-Starfive-6.2

Linux-Starfive-6.5

Linux Kernel

References · 12

• https://git.kernel.org/stable/c/40014493cece72a0be5672cd86763e53fb3ec613 · Patch
• https://git.kernel.org/stable/c/428fdf55301e6c8fa5a36b426240797b1cf86570 · Patch
• https://ubuntu.com/security/CVE-2026-31742 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31742 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31742 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-31742 · Security Note
• https://git.kernel.org/stable/c/891d790fdb5c96c6e1d2841e06ee6c360f2d1288 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31742 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-31742 · Vendor Advisory
• https://git.kernel.org/linus/40014493cece72a0be5672cd86763e53fb3ec613 · Note
• https://twitter.com/DFIR_Lab/status/2058006353482801626 · Twitter Post
• https://t.me/cveNotify/162597 · Telegram Post