PT-2026-36396 · Linux · Linux Kernel

Published 2026-05-01 · Updated 2026-05-23 · CVE-2026-31761

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the mpu3050 gyro driver. This occurs because the iio device register() function is not called at the end of the probe function.

Recommendations Move the iio device register() function to the end of the probe function and adjust the iio device unregister() function accordingly.

Fix

LPE

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2026-31761

ECHO-45A1-9D55-35F2

Affected Products

Linux Kernel

References · 18

• https://git.kernel.org/stable/c/2a4537653d200fda2a8516083459f8ff6194f8fc · Patch
• https://git.kernel.org/stable/c/051ca43b0e0e4b66bfd349cd53ccf231ad1d69b7 · Patch
• https://git.kernel.org/stable/c/92f18aa86302fe83e0726a1191015f427d4ff056 · Patch
• https://git.kernel.org/stable/c/cc3de12a5612ee25df7fb549cb7b3e4cc8bfaf9c · Patch
• https://git.kernel.org/stable/c/caec338f91469f0a70b68165185afa3abc994545 · Patch
• https://git.kernel.org/stable/c/4c05799449108fb0e0a6bd30e65fffc71e60db4d · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31761 · Security Note
• https://ubuntu.com/security/CVE-2026-31761 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31761 · Security Note
• https://git.kernel.org/stable/c/59a317f8215674c8330817770497301bfb2c1b99 · Patch
• https://git.kernel.org/stable/c/22487ef85f6dd9499ddf49b85a08afc50a3f1992 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31761 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31761 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31761 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31761 · Vendor Advisory