PT-2026-36403 · Linux · Linux Kernel

CVE-2026-31768 · Published 2026-05-01 · Updated 2026-07-23

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ti-adc161s626 component of the Industrial I/O (IIO) ADC subsystem where spi read() utilized stack memory instead of DMA-safe memory. Direct Memory Access (DMA) is a feature that allows hardware subsystems to access main system memory independently of the central processing unit. All SPI buffers are required to be DMA-safe to ensure system stability and correctness.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-31768

ECHO-74B6-87D7-BB2F

SUSE-SU-2026:3130-1

SUSE-SU-2026:3166-1

USN-8567-1

USN-8574-1

USN-8574-2

USN-8595-1

USN-8596-1

Affected Products

Linux Kernel

References · 2000

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31768.json · Exploit
• https://ubuntu.com/security/CVE-2026-31415 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46003 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45958 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-52969 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31605 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31474 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-45834 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43085 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53016 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31430 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23317 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31551 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-53279 · Vendor Advisory