PT-2026-36414 · Linux · Linux Kernel

Published 2026-05-01 · Updated 2026-05-02 · CVE-2026-31779

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential out-of-bounds read exists in the iwl mvm nd match info handler() function. The memcpy() function assumes the dynamic array notif->matches is at least as large as the number of bytes to be copied; if this is not the case, results->matches may contain unwanted data. This occurs due to insufficient validation of the packet length.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-31779

ECHO-1881-13DD-EBF2

Affected Products

Linux Kernel

References · 15

• https://git.kernel.org/stable/c/ffbed27ba15ef80d1c622eeedbfef03e501ae134 · Patch
• https://git.kernel.org/stable/c/f6abac936a0dfd31d6c3e49205ec0ee75a8f887f · Patch
• https://ubuntu.com/security/CVE-2026-31779 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-31779 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31779 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-31779 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-31779 · Vendor Advisory
• https://git.kernel.org/stable/c/744fabc338e87b95c4d1ff7c95bc8c0f834c6d99 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31779 · Vendor Advisory
• https://git.kernel.org/stable/c/ca0e9491b98ca4c5b44204b0b3dd8062a3b5fba2 · Patch
• https://git.kernel.org/stable/c/dd90880eb5ec5442b37eb2b95688f4a63f4883e3 · Patch
• https://git.kernel.org/stable/c/e67d8c626ace80b0fa2b48c8ec0a46b508c93442 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31779 · Vendor Advisory
• https://git.kernel.org/linus/744fabc338e87b95c4d1ff7c95bc8c0f834c6d99 · Note
• https://docs.bell-sw.com/security/cves/CVE-2026-31779 · Note