CVE-2026-31554

HIGH EPSS 5.9%
Published Apr 24, 20262mo ago · Modified Jun 17, 20262w ago
7.8 CVSS 3.1
High
Find Similar
Published Apr 24, 2026 2mo ago
Last Modified Jun 17, 2026 2w ago

Description

In the Linux kernel, the following vulnerability has been resolved: futex: Require sys_futex_requeue() to have identical flags Nicholas reported that his LLM found it was possible to create a UaF when sys_futex_requeue() is used with different flags. The initial motivation for allowing different flags was the variable sized futex, but since that hasn't been merged (yet), simply mandate the flags are identical, as is the case for the old style sys_futex() requeue operations.

CVSS Details

Base Score
7.8
Exploitability
1.8
Impact
5.9
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
5.9% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-416 Use After Free Memory Safety

Affected Products 11

VendorProductVersionRange
linuxlinux_kernel*≥6.7.1  –  <6.12.80
linuxlinux_kernel*≥6.13  –  <6.18.21
linuxlinux_kernel*≥6.19  –  <6.19.11
linuxlinux_kernel6.7any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any
linuxlinux_kernel7.0any

References 4

  • git.kernel.org https://git.kernel.org/stable/c/027145ace09fad4c7cbcd6c61fe9b429c63eb0e5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/18b7d09c2b794c71d4252f3ea2cf84ad12b73d6a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/19f94b39058681dec64a10ebeb6f23fe7fc3f77a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e2f78c7ec1655fedd945366151ba54fcb9580508
    Patch

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/027145ace09fad4c7cbcd6c61fe9b429c63eb0e5
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/18b7d09c2b794c71d4252f3ea2cf84ad12b73d6a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/19f94b39058681dec64a10ebeb6f23fe7fc3f77a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/e2f78c7ec1655fedd945366151ba54fcb9580508
    Patch