PT-2026-36398 · Linux · Linux Kernel

Published 2026-05-01 · Updated 2026-05-08 · CVE-2026-31763

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the mpu3050 gyro driver within the Industrial I/O (IIO) subsystem. During the teardown process, the free irq() function is called using the mpu3050 handler instead of the correct mpu3050->trig handler.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-31763

ECHO-AF1E-FDB7-1AD8

Affected Products

Linux Kernel

References · 18

• https://cve.org/CVERecord?id=CVE-2026-31763 · Security Note
• https://git.kernel.org/stable/c/a09171d3f23e13bccd3dc34863186707c6301071 · Patch
• https://git.kernel.org/stable/c/edb11a1aef4011a4b7b22cc3c3396c6fe371f4a6 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31763 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-31763 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31763 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-31763 · Vendor Advisory
• https://git.kernel.org/stable/c/8001b42fbd5e510dced3a25665019982c99bc708 · Patch
• https://git.kernel.org/stable/c/ac1233397f4cfe55d71f6aa459b42c256c951531 · Patch
• https://git.kernel.org/stable/c/11f7cd960f05b3f06747abfdc4e56dd0d8b8a157 · Patch
• https://ubuntu.com/security/CVE-2026-31763 · Vendor Advisory
• https://git.kernel.org/stable/c/8631e755fc07b651b5d158cc3656ef76cc874068 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31763 · Vendor Advisory
• https://git.kernel.org/stable/c/2821f7b62c5b3633c4923c7e4f742380897cd511 · Patch
• https://git.kernel.org/stable/c/fdbe4b5268cd41f9953d25a67d139e47cac34519 · Patch