PT-2026-36417 · Linux · Linux Kernel

Published 2026-05-01 · Updated 2026-05-11 · CVE-2026-31782

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel where auto counter reload may include a group of events containing software events. Because the software event PMU is not the x86 hybrid pmu, a container of operation within the intel pmu set acr caused constr() function (accessed via the hybrid helper) can lead to out-of-bounds memory reads.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2026-31782

OESA-2026-2232

OESA-2026-2235

OESA-2026-2236

Affected Products

Linux Kernel

References · 26

• https://nvd.nist.gov/vuln/detail/CVE-2026-31602 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31418 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31680 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31782 · Vendor Advisory
• https://git.kernel.org/stable/c/dbde07f06226438cd2cf1179745fa1bec5d8914a · Patch
• https://git.kernel.org/stable/c/bfee04838f636d064bc92075c65c95f739003804 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31424 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23442 · Security Note
• https://ubuntu.com/security/CVE-2026-31782 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2026-2232 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71089 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31782 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-31782 · Security Note
• https://osv.dev/vulnerability/OESA-2026-2236 · Vendor Advisory
• https://git.kernel.org/stable/c/e435a30ca6fe14c9611b1fc731c98a6d28410247 · Patch