PT-2026-36417 · Linux · Linux Kernel

CVE-2026-31782 · Published 2026-03-12 · Updated 2026-05-11

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel where auto counter reload may include a group of events containing software events. Because the software event PMU is not the x86 hybrid pmu, a container of operation within the intel pmu set acr caused constr() function (accessed via the hybrid helper) can lead to out-of-bounds memory reads.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Out of bounds Read

Weakness Enumeration

CWE-119

CWE-125

Related Identifiers

BDU:2026-10902

CVE-2026-31782

OESA-2026-2232

OESA-2026-2235

OESA-2026-2236

Affected Products

Linux Kernel

References · 34

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31782.json · Exploit
• https://git.kernel.org/stable/c/e435a30ca6fe14c9611b1fc731c98a6d28410247 · Patch
• https://git.kernel.org/stable/c/dbde07f06226438cd2cf1179745fa1bec5d8914a · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31782 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31423 · Security Note
• https://osv.dev/vulnerability/CVE-2026-31782 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31420 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-31782 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31782 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-31782 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-10902 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23442 · Security Note
• https://git.kernel.org/stable/c/bfee04838f636d064bc92075c65c95f739003804 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-71089 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31680 · Security Note